|
211981
|
6.1 |
MEDIUM
Network
|
broadcom
|
release_automation
|
Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 befo…
|
CWE-79
Cross-site Scripting
|
CVE-2015-8699
|
2024-11-21 11:38 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211982
|
7.1 |
HIGH
Local
|
broadcom
|
release_automation
|
CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary…
|
NVD-CWE-Other
|
CVE-2015-8698
|
2024-11-21 11:38 |
2016-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211983
|
7.5 |
HIGH
Network
|
netgear
|
d3600_firmware d6000_firmware
|
The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator pass…
|
CWE-255 CWE-200
Credentials Management Information Exposure
|
CVE-2015-8289
|
2024-11-21 11:38 |
2016-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211984
|
5.9 |
MEDIUM
Network
|
netgear
|
d3600_firmware d6000_firmware
|
NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote att…
|
NVD-CWE-Other
|
CVE-2015-8288
|
2024-11-21 11:38 |
2016-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211985
|
7.5 |
HIGH
Network
|
idera
|
uptime_infrastructure_monitor
|
The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2015-8268
|
2024-11-21 11:38 |
2016-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211986
|
8.8 |
HIGH
Network
|
broadcom
|
symantec_data_center_security_server symantec_critical_system_protection symantec_embedded_security_critical_system_protection symantec_data_center_security_server_and_agents symantec_emb…
|
SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Contro…
|
CWE-89
SQL Injection
|
CVE-2015-8157
|
2024-11-21 11:38 |
2016-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211987
|
5.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer de…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2015-8558
|
2024-11-21 11:38 |
2016-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211988
|
6.5 |
MEDIUM
Network
|
ibm
|
spss_statistics
|
Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 2…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8530
|
2024-11-21 11:38 |
2016-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211989
|
7.8 |
HIGH
Local
|
symantec
|
endpoint_encryption
|
Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYST…
|
NVD-CWE-Other
|
CVE-2015-8156
|
2024-11-21 11:38 |
2016-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211990
|
7.8 |
HIGH
Local
|
openafs debian
|
openafs debian_linux
|
Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system crash) via a pioctl with an input buffer size of 4096 bytes.
|
CWE-189
Numeric Errors
|
CVE-2015-8312
|
2024-11-21 11:38 |
2016-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|