Browse CVEs

HIGH 7.8 CVE-2015-0751 Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service vi… Unified Communications Manager Mitigation only Fix from $1,9502015-05-29 HIGH 7.8 CVE-2013-7441 The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root proce… Nbd Patch available Fix from $1,9502015-05-29 MEDIUM 5.0 CVE-2015-3813 The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine th… Wireshark Mitigation only Fix from $1,6002015-05-26 HIGH 7.8 CVE-2015-3812 Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1… Linux Patch available Fix from $1,9502015-05-26 HIGH 7.8 CVE-2015-3810 epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attac… Wireshark Mitigation only Fix from $1,9502015-05-26 HIGH 7.8 CVE-2015-2122 The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST … Sdn Van Controller after 2.5 Fix from $1,9502015-05-25 MEDIUM 5.0 CVE-2014-8927 Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Ti… Endpoint Manager Family Patch available Fix from $1,6002015-05-25 MEDIUM 5.0 CVE-2014-8926 Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Ti… Endpoint Manager Family Patch available Fix from $1,6002015-05-25 HIGH 7.8 CVE-2015-1899 IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Websphere Portal Patch available Fix from $1,9502015-05-25 HIGH 7.8 CVE-2015-0722 The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial o… Telepresence Tc Software Mitigation only Fix from $1,9502015-05-25 MEDIUM 5.0 CVE-2015-0742 The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-05-21 HIGH 7.8 CVE-2015-1846 unzoo allows remote attackers to cause a denial of service (infinite loop and resource consumption) via unspecified vectors to the (1) ExtrArch or (2… Unzoo Mitigation only Fix from $1,9502015-05-19 HIGH 7.8 CVE-2015-1868EPSS 82% The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3… Fedora Mitigation only Fix from $1,9502015-05-18 MEDIUM 6.1 CVE-2015-0723 The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to ca… Wireless Lan Controller Software Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.1 CVE-2015-0731 The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, ak… iOS Mitigation only Fix from $1,6002015-05-16 MEDIUM 5.0 CVE-2015-0971 The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates. Debian Linux after 2.0.7 Fix from $1,6002015-05-14 MEDIUM 5.0 CVE-2015-2668 ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file. Ubuntu Linux after 0.98.6 Fix from $1,6002015-05-12 MEDIUM 5.0 CVE-2015-2222 ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file. Ubuntu Linux after 0.98.6 Fix from $1,6002015-05-12 MEDIUM 5.0 CVE-2015-2221 ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file. Ubuntu Linux after 0.98.6 Fix from $1,6002015-05-12 MEDIUM 5.0 CVE-2015-2170 The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file. Ubuntu Linux after 0.98.6 Fix from $1,6002015-05-12 MEDIUM 5.0 CVE-2014-3598 The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image. Pillow after 2.5.2 Fix from $1,6002015-05-01 MEDIUM 5.0 CVE-2015-0712 The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of ser… Staros Mitigation only Fix from $1,6002015-05-01 MEDIUM 5.0 CVE-2015-0711 The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a de… Staros Mitigation only Fix from $1,6002015-04-29 MEDIUM 6.1 CVE-2015-0710 The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) … Ios Xe Mitigation only Fix from $1,6002015-04-29 MEDIUM 6.8 CVE-2015-0709 Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret … Ios Xe Mitigation only Fix from $1,6002015-04-29 MEDIUM 6.1 CVE-2015-0708 Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_N… Ios Xe Mitigation only Fix from $1,6002015-04-29 HIGH 7.8 CVE-2015-1886 The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF… Websphere Portal Patch available Fix from $1,9502015-04-27 HIGH 7.8 CVE-2015-0695 Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual int… Ios Xr Mitigation only Fix from $1,9502015-04-17 HIGH 7.1 CVE-2015-2942 MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of service (CPU an… Mediawiki after 1.19.23 Fix from $1,9502015-04-13 HIGH 7.1 CVE-2015-2937 MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a denial of ser… Mediawiki after 1.19.23 Fix from $1,9502015-04-13