|
211791
|
7.5 |
HIGH
Network
|
varnish_cache_project debian
|
varnish_cache debian_linux
|
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated…
|
NVD-CWE-Other
|
CVE-2015-8852
|
2024-11-21 11:39 |
2016-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211792
|
8.8 |
HIGH
Network
|
adobe
|
flash_player air air_sdk air_sdk_\&_compiler flash_player_desktop_runtime
|
Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, A…
|
CWE-416
Use After Free
|
CVE-2015-8823
|
2024-11-21 11:39 |
2016-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211793
|
3.3 |
LOW
Local
|
opensuse
|
opensuse
|
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8842
|
2024-11-21 11:39 |
2016-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211794
|
9.8 |
CRITICAL
Network
|
suse opensuse canonical debian gnu fedoraproject
|
linux_enterprise_server linux_enterprise_desktop linux_enterprise_debuginfo linux_enterprise_software_development_kit opensuse suse_linux_enterprise_server ubuntu_linux debian_li…
|
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possib…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8779
|
2024-11-21 11:39 |
2016-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211795
|
9.8 |
CRITICAL
Network
|
fedoraproject debian canonical gnu suse opensuse
|
fedora debian_linux ubuntu_linux glibc linux_enterprise_server linux_enterprise_desktop linux_enterprise_debuginfo linux_enterprise_software_development_kit opensuse suse_l…
|
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the s…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8778
|
2024-11-21 11:39 |
2016-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211796
|
9.1 |
CRITICAL
Network
|
suse opensuse canonical debian fedoraproject gnu
|
linux_enterprise_server linux_enterprise_desktop linux_enterprise_debuginfo linux_enterprise_software_development_kit opensuse suse_linux_enterprise_server ubuntu_linux debian_li…
|
The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive informatio…
|
CWE-189
Numeric Errors
|
CVE-2015-8776
|
2024-11-21 11:39 |
2016-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211797
|
7.5 |
HIGH
Network
|
xmlsoft canonical debian
|
libxml2 ubuntu_linux debian_linux
|
dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring…
|
NVD-CWE-noinfo
|
CVE-2015-8806
|
2024-11-21 11:39 |
2016-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211798
|
6.5 |
MEDIUM
Network
|
libtiff debian
|
libtiff debian_linux
|
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
|
CWE-787
Out-of-bounds Write
|
CVE-2015-8784
|
2024-11-21 11:39 |
2016-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211799
|
6.1 |
MEDIUM
Network
|
fedoraproject horde debian
|
fedora groupware debian_linux
|
Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Web…
|
CWE-79
Cross-site Scripting
|
CVE-2015-8807
|
2024-11-21 11:39 |
2016-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211800
|
7.4 |
HIGH
Local
|
foxitsoftware
|
foxit_reader
|
The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8843
|
2024-11-21 11:39 |
2016-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|