Browse CVEs

HIGH 7.1 CVE-2015-2936 MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a … Mediawiki Patch available Fix from $1,9502015-04-13 MEDIUM 5.0 CVE-2015-2779 Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of servic… Quassel after 0.11.0 Fix from $1,6002015-04-10 MEDIUM 5.0 CVE-2015-2778 Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service (crash)… Quassel after 0.11.0 Fix from $1,6002015-04-10 MEDIUM 5.0 CVE-2015-0248EPSS 12% The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of … Subversion Mitigation only Fix from $1,6002015-04-08 HIGH 7.8 CVE-2015-0202EPSS 8% The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large numbe… Subversion Mitigation only Fix from $1,9502015-04-08 HIGH 7.1 CVE-2015-0688 Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a … Ios Xe Mitigation only Fix from $1,9502015-04-04 MEDIUM 6.3 CVE-2015-0686 The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote aut… Nx Os Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.3 CVE-2015-0687 The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows rem… iOS Mitigation only Fix from $1,6002015-04-03 HIGH 7.8 CVE-2015-0283 The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denia… Slapi Nis after 0.54.1 Fix from $1,9502015-03-30 MEDIUM 5.0 CVE-2014-3619 The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" frag… Opensuse Mitigation only Fix from $1,6002015-03-27 MEDIUM 5.0 CVE-2015-0672 The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of craf… Ios Xr Mitigation only Fix from $1,6002015-03-26 HIGH 7.8 CVE-2015-0648 Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Commo… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0646 Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS be… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0643 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3… Ios Xe Mitigation only Fix from $1,9502015-03-26 MEDIUM 5.0 CVE-2015-2316 The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, … Django Patch available Fix from $1,6002015-03-25 MEDIUM 5.0 CVE-2015-0671 The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of ser… Videoscape Delivery System For Internet Streamer Mitigation only Fix from $1,6002015-03-20 MEDIUM 6.8 CVE-2015-1083 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1082 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1081 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1080 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1078 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1079 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1077 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1076 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1075 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1074 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1073 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1072 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1071 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18 MEDIUM 6.8 CVE-2015-1070 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a de… Safari after 12.1 Fix from $1,6002015-03-18