|
212011
|
7.8 |
HIGH
Local
|
gnu
|
a2ps
|
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2015-8107
|
2024-11-21 11:38 |
2017-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212012
|
7.9 |
HIGH
Local
|
qemu debian
|
qemu debian_linux
|
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.
|
CWE-787
Out-of-bounds Write
|
CVE-2015-8666
|
2024-11-21 11:38 |
2017-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212013
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instanc…
|
CWE-787
Out-of-bounds Write
|
CVE-2015-8613
|
2024-11-21 11:38 |
2017-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212014
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxne…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2015-8568
|
2024-11-21 11:38 |
2017-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212015
|
6.5 |
MEDIUM
Network
|
qemu debian
|
qemu debian_linux
|
Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
|
CWE-369
Divide By Zero
|
CVE-2015-8504
|
2024-11-21 11:38 |
2017-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212016
|
7.5 |
HIGH
Network
|
keepassx_project
|
keepassx
|
In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to obtain sensitive information by reading the .x…
|
CWE-200
Information Exposure
|
CVE-2015-8378
|
2024-11-21 11:38 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212017
|
5.5 |
MEDIUM
Local
|
eparaksts
|
eparakstitajs_3 edoc-libraries
|
LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files.
|
CWE-200
Information Exposure
|
CVE-2015-8276
|
2024-11-21 11:38 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212018
|
5.5 |
MEDIUM
Local
|
eparaksts
|
eparakstitajs_3 edoc-libraries
|
LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to write to arbitrary files via crafted EDOC files.
|
CWE-284
Improper Access Control
|
CVE-2015-8275
|
2024-11-21 11:38 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212019
|
7.5 |
HIGH
Network
|
axis
|
axis_communications_firmware
|
AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."
|
CWE-74
Injection
|
CVE-2015-8258
|
2024-11-21 11:38 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212020
|
8.8 |
HIGH
Network
|
axis
|
axis_communications_firmware
|
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
|
CWE-352
Origin Validation Error
|
CVE-2015-8255
|
2024-11-21 11:38 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|