Browse CVEs

MEDIUM 6.4 CVE-2015-1291 The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check wh… Chrome after 44.0.2403 Fix from $1,6002015-09-03 HIGH 7.2 CVE-2015-5737 The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, (4) mdare64_52.sys, and (5) Fortishield.sys drivers in Fortinet FortiClient before 5.… Forticlient after 5.2.3 Fix from $1,9502015-09-03 HIGH 7.2 CVE-2015-5736 The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the ca… Forticlient after 5.2.3 Fix from $1,9502015-09-03 HIGH 7.2 CVE-2015-5735 The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users… Forticlient after 5.2.3 Fix from $1,9502015-09-03 HIGH 7.5 CVE-2015-6520 IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct request. Ippusbxd after 1.21.2 Fix from $1,9502015-09-01 HIGH 7.2 CVE-2015-5157 arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during user… Enterprise Linux Desktop 3.12.47 / 3.14.54+ Fix from $1,9502015-08-31 HIGH 7.2 CVE-2015-3290 arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly relies on espfix64 during nested NMI processing, which a… Linux Kernel 3.12.47 / 3.14.54+ Fix from $1,9502015-08-31 MEDIUM 6.9 CVE-2015-5367 The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin C… Hspa\+ Gobi 4g Mitigation only Fix from $1,6002015-08-27 HIGH 7.2 CVE-2015-5402 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows local users to gain… Systems Insight Manager after 7.4 Fix from $1,9502015-08-27 HIGH 8.5 CVE-2015-5222 Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to execute a… Openshift Mitigation only Fix from $1,9502015-08-24 HIGH 7.2 CVE-2015-6565 sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disrupti… Openssh No fix yet Fix from $1,9502015-08-24 HIGH 7.0 CVE-2015-6564 Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow l… Openssh after 6.9 Fix from $1,9502015-08-24 MEDIUM 5.0 CVE-2015-2984 I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP reflection)… Wn G54\/r2 Firmware after 1.02 Fix from $1,6002015-08-22 HIGH 7.5 CVE-2015-4535 Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02, w… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4533 EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check author… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4532 EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check author… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 HIGH 9.0 CVE-2015-4531 EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check author… Documentum Content Server Mitigation only Fix from $1,9502015-08-20 MEDIUM 6.5 CVE-2015-4303 Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of the nobo… Telepresence Video Communication Server Software Mitigation only Fix from $1,6002015-08-20 MEDIUM 5.5 CVE-2015-4322 Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authent… Content Security Management Appliance Mitigation only Fix from $1,6002015-08-19 MEDIUM 5.0 CVE-2015-5511 The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only c… Hybridauth Social Login Patch available Fix from $1,6002015-08-18 MEDIUM 6.0 CVE-2015-5509 The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to admini… Administration Views Patch available Fix from $1,6002015-08-18 MEDIUM 5.0 CVE-2015-5498 The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview (admin/shipwire/shipments), … Shipwire Api Patch available Fix from $1,6002015-08-18 MEDIUM 5.0 CVE-2015-5496 The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecifie… Pass2pdf Patch available Fix from $1,6002015-08-18 MEDIUM 5.0 CVE-2015-5493 The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which allows remot… Entityform Block Patch available Fix from $1,6002015-08-18 HIGH 9.3 CVE-2015-5784EPSS 9% runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows at… Mac Os X after 10.10.4 Fix from $1,9502015-08-17 MEDIUM 5.8 CVE-2015-5770 MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to r… Iphone Os after 8.4 Fix from $1,6002015-08-17 HIGH 7.2 CVE-2015-3772 IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified … Mac Os X after 10.10.4 Fix from $1,9502015-08-16 HIGH 7.2 CVE-2015-3767 udf in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a m… Mac Os X after 10.10.4 Fix from $1,9502015-08-16 HIGH 7.2 CVE-2015-3761 The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unsp… Mac Os X after 10.10.4 Fix from $1,9502015-08-16 HIGH 9.3 CVE-2015-2480EPSS 14% The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers to execu… .net Framework Mitigation only Fix from $1,9502015-08-15