CVEs published in December 2015
662 vulnerabilities, 198 critical, 4 exploited.
- moodleMoodle cross-site request forgery (CSRF) vulnerability4.3 Medium
- moodleAtto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a...6.8 Medium
- emc networkerEMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build...7.8 High
- cisco nx-osThe kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial...4.9 Medium
- cisco unified sip phone 3900 firmwareCisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource...7.8 High
- cisco unified computing system central softwareCisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct...5.0 Medium
- cisco unified computing system central softwareCross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software...4.3 Medium
- cisco webex meetingsThe Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom...4.3 Medium
- google chrome, v8 +1 moreMultiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome...7.5 High
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to...10.0 High
- google chromeThe CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the...4.3 Medium
- google chromeThe CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content...4.3 Medium
- google chromeThe page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW)...4.3 Medium
- google chromeThe Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0...4.3 Medium
- google chromeUse-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit...7.5 High
- google chromeThe convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not...7.5 High
- google chromeThe DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent...7.5 High
- google chromejs/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements...7.5 High
- google chromeThe DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the...7.5 High
- google chromeThe provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in...7.5 High
- google chromeThe DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the...7.5 High
- google chromeUse-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the...7.5 High
- google chromeUse-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73...7.5 High
- google chromeUse-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome...10.0 High
- opensslThe ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote...5.0 Medium
- cyrus imap, opensuse leap, opensuse +2 moreInteger overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and...7.5 High
- cyrus imap, opensuse leap, opensuse +2 moreInteger overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and...7.5 High
- cyrus imap, opensuse leap, opensuse +2 moreThe index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2...7.5 High
- redhat cephCRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94...4.3 Medium
gitSUSERecommended update for gitNo score- cisco unity connectionCross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9...4.3 Medium
- cisco ios xeCisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local...7.2 High
- redislabs redis, debian linux, opensuse leap +2 more +4 moreInteger overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x...7.5 High
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...4.3 Medium
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...5.3 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 morecrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...7.5 High
- openssl, canonical ubuntu linux, nodejs node.js +2 moreThe Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1...7.5 High
- mcafee enterprise security managerMcAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and...9.3 High
- gnome orca, debian linux +1 moreOrca has arbitrary code execution due to insecure Python module load7.3 High
- librawThe phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors...9.8 Critical
- librawArray index error in smal_decode_segment function in LibRaw before 0.17.1 allows context...9.8 Critical
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +6 more +8 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...7.5 High
- cisco web security applianceThe passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142...5.0 Medium
- cisco iosThe publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services...7.2 High
- pcre perl compatible regular expression libraryPCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial...7.5 High
- pcre perl compatible regular expression library, php +1 morePCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote...9.8 Critical
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morepcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote...7.5 High
- pcre perl compatible regular expression libraryPCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers...7.5 High
- pcre, fedoraproject fedora, oracle linux +7 more +9 moreThe pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting,...9.8 Critical
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morePCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote...9.8 Critical
- Show moreLoading…