Browse CVEs

MEDIUM 5.0 CVE-2015-5963EPSS 5% contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions all… Django Patch available Fix from $1,6002015-08-24 HIGH 7.8 CVE-2015-5058 Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10,… Big Ip Access Policy Manager Mitigation only Fix from $1,9502015-08-24 HIGH 7.8 CVE-2014-1972EPSS 10% Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attac… Tapestry after 5.3.5 Fix from $1,9502015-08-22 MEDIUM 5.0 CVE-2015-4318 Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a… Telepresence Video Communication Server Software Mitigation only Fix from $1,6002015-08-20 MEDIUM 5.0 CVE-2015-4317 Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a… Telepresence Video Communication Server Software Mitigation only Fix from $1,6002015-08-20 MEDIUM 5.0 CVE-2015-4296 Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java process rest… Nx Os Mitigation only Fix from $1,6002015-08-19 MEDIUM 6.8 CVE-2015-4301 Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that are copi… Nx Os Mitigation only Fix from $1,6002015-08-19 MEDIUM 5.0 CVE-2015-1819EPSS 6% The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expa… Debian Linux after 9.2.1 Fix from $1,6002015-08-14 HIGH 7.8 CVE-2015-1987 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication dat… Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-1958 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication dat… Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-1956 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication dat… Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-1955 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentication data. Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-4291 Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Proc… Ios Xe Mitigation only Fix from $1,9502015-08-01 MEDIUM 5.0 CVE-2015-4293 The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packe… Ios Xe Mitigation only Fix from $1,6002015-07-30 HIGH 7.1 CVE-2015-0681 The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB… iOS Mitigation only Fix from $1,9502015-07-24 MEDIUM 5.0 CVE-2015-4285 The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions a… Ios Xr Mitigation only Fix from $1,6002015-07-23 MEDIUM 5.0 CVE-2015-4651 The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not pro… Wireshark Mitigation only Fix from $1,6002015-07-22 HIGH 7.8 CVE-2015-4283 Cisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP servic… Videoscape Policy Resource Manager Mitigation only Fix from $1,9502015-07-21 MEDIUM 5.0 CVE-2015-4280 Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service (HTTP service outage) via a crafted HTTP request, aka B… Prime Collaboration No fix yet Fix from $1,6002015-07-18 MEDIUM 5.0 CVE-2015-4275 The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to … Asr 5000 Series Software Mitigation only Fix from $1,6002015-07-16 MEDIUM 5.0 CVE-2015-5360 IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 befo… Junos Mitigation only Fix from $1,6002015-07-16 MEDIUM 5.0 CVE-2015-5357 The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before… Junos Mitigation only Fix from $1,6002015-07-16 HIGH 9.3 CVE-2015-5362 The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 b… Junos Mitigation only Fix from $1,9502015-07-14 HIGH 7.1 CVE-2015-5358 Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D15, … Junos Mitigation only Fix from $1,9502015-07-14 HIGH 7.8 CVE-2015-5145 validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Django Mitigation only Fix from $1,9502015-07-14 HIGH 7.8 CVE-2015-5143EPSS 7% The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a deni… Django Patch available Fix from $1,9502015-07-14 MEDIUM 6.1 CVE-2015-4243 The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload… Ios Xe Mitigation only Fix from $1,6002015-07-08 MEDIUM 5.0 CVE-2015-4240 Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified URL in a GET request, aka Bug I… Ip Communicator Mitigation only Fix from $1,6002015-07-08 HIGH 7.8 CVE-2015-4230 Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bu… Headend System Release Mitigation only Fix from $1,9502015-07-06 MEDIUM 6.1 CVE-2015-4239 Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by … Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-07-03