Browse CVEs

MEDIUM 6.1 CVE-2015-8760 The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka… TYPO3 Mitigation only Fix from $1,6002016-01-08 MEDIUM 5.5 CVE-2015-8226 The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 … Ale Firmware Mitigation only Fix from $1,6002016-01-08 MEDIUM 5.5 CVE-2015-8225 The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 … Ale Firmware Mitigation only Fix from $1,6002016-01-08 HIGH 8.1 CVE-2015-7754 Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or exec… Screenos after 6.3.0 Fix from $1,9502016-01-08 CRITICAL 9.8 CVE-2015-5254EPSS 38% Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitr… Openshift Mitigation only Fix from $2,3002016-01-08 MEDIUM 5.5 CVE-2015-8742 The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the c… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8741 The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header dat… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.3 CVE-2015-8740EPSS 7% The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate th… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8738 The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8739 The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a … Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8737 The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote … Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8736 The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, whic… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8735 The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an in… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8734 The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allow… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8733 The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8732 The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8730 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, w… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8731 The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 do… Wireshark No fix yet Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8729 The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure t… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8728 The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A … Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8727 The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8726 wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8725EPSS 5% The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8724 The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8723 The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8722 epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, whi… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8721 Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8720 The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8719 The dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Su… Wireshark Mitigation only Fix from $1,6002016-01-04 MEDIUM 5.5 CVE-2015-8718 Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Ma… Wireshark Mitigation only Fix from $1,6002016-01-04