CVEs published in December 2015
662 vulnerabilities, 198 critical, 4 exploited.
- google androidWi-Fi in Android 5.x before 5.1.1 LMY48Z allows attackers to obtain sensitive information via...5.0 Medium
- google androidMedia Framework in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to...5.0 Medium
- google androidThe Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote...2.6 Low
- google androidlibstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers...5.0 Medium
- google androidSystem Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information...4.3 Medium
- google androidSystem Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information...4.3 Medium
- google androidWi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted...9.3 High
- google androidThe Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows...5.0 Medium
- google androidSystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain...9.3 High
- google androidlibstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain...9.3 High
- google androidThe kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain...9.3 High
- google androidBluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to...4.3 Medium
- google androidSkia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers...9.3 High
- google androidmediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to...9.3 High
- phpmailer project phpmailer, debian linux +1 moreSMTP Injection in PHPMailer5.0 Medium
- bluecoat unified agentBlue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files...2.1 Low
- elastic kibanaCross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x...6.8 Medium
- huawei unified security gateway firmwareHuawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before...7.1 High
- ztree project ztreeCross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote...4.3 Medium
- symantec proxysg firmwareThe default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6...5.0 Medium
- f5 big-ip edge gateway, big-iq adc, big-iq cloud +15 more +17 moreThe iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0...9.0 High
- openldap, oracle linux, redhat enterprise linux desktop +6 more +8 moreThe nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse...7.5 High
- canonical lxcfs, ubuntu linux +1 moreThe do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions,...7.2 High
- canonical lxcfs, ubuntu linux +1 moreLXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to...4.6 Medium
- redhat libreportlibreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report,...5.0 Medium
- red hat automatic bug reporting tool, oracle linux, redhat enterprise linux +4 more +6 moreThe abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...7.8 High
- redhat automatic bug reporting tool, enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool ...3.6 Low
- dhcpcd project dhcpcd, debian linux +1 moreThe decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which...7.5 High
- dhcpcd project dhcpcd, debian linux +1 moreThe decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial...7.5 High
- dhcpcd project dhcpcd, debian linux +1 moreThe decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial...7.5 High
- google chromeThe VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google...10.0 High
- google chromeUse-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio...7.5 High
- google androidThe FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy...4.3 Medium
- google chromeInteger overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used...7.5 High
- google chromeUse-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73...6.8 Medium
- google chromePDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome:...4.3 Medium
- google chromeThe CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google...7.5 High
- google chromeThe opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before...6.8 Medium
- google chromefpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not...7.5 High
- google chromeUse-after-free vulnerability in the GetLoadTimes function in renderer...7.5 High
- google chrome, debian linux, nodejs node.js +2 moreThe BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier...9.8 Critical
- linux kernelThe ext4 implementation in the Linux kernel before 2.6.34 does not properly track the...4.6 Medium
- linux kernelUse-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local...5.3 Medium
- moodleMoodle allows attackers to bypass intended access restrictions4.3 Medium
- moodleMoodle allows attackers to read SCORM contents4.3 Medium
- moodleMoodle sensitive information disclosure4.3 Medium
- moodleMoodle does not properly implement group-based access restrictions4.3 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilities8.8 High
- moodleMoodle XSS Vulnerability6.1 Medium
- moodleMoodle multiple cross-site scripting (XSS) vulnerabilities5.4 Medium
- Show moreLoading…