Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
December

CVEs published in December 2015

662 vulnerabilities, 198 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

qemu, debian linux +1 moreThe ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...CVE-2015-8558Fix available5.5 MediumDecember 16, 2015
samba, canonical ubuntu linux, debian linux +2 moreThe samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4...CVE-2015-8467Fix available7.5 HighDecember 16, 2015
cactiSQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows...CVE-2015-8369Fix available7.5 HighDecember 16, 2015
qemuThe MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS...CVE-2015-7549Fix available6.0 MediumDecember 16, 2015
samba, canonical ubuntu linux, debian linux +2 moreThe LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return...CVE-2015-7540Fix available7.5 HighDecember 16, 2015
sambaldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7,...CVE-2015-5330Fix available7.5 HighDecember 16, 2015
samba, canonical ubuntu linux, debian linux +2 moreThe shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x...CVE-2015-5299Fix availableEPSS 13.6%5.3 MediumDecember 16, 2015
samba, canonical ubuntu linux, debian linux +2 moreSamba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections...CVE-2015-5296Fix available5.4 MediumDecember 16, 2015
samba, canonical ubuntu linux, debian linux +2 morevfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3,...CVE-2015-5252Fix availableEPSS 13.3%7.2 HighDecember 16, 2015
sambaThe ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP...CVE-2015-3223Fix available5.3 MediumDecember 16, 2015
autodesk design reviewMultiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote...CVE-2015-85726.8 MediumDecember 15, 2015
autodesk design reviewInteger overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to...CVE-2015-85716.8 MediumDecember 15, 2015
lepide active directory self serviceThe password reset functionality in Lepide Active Directory Self Service allows remote...CVE-2015-85707.4 HighDecember 15, 2015
cactiSQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8...CVE-2015-8377Fix available6.5 MediumDecember 15, 2015
synnefoims internet management softwareCross-site scripting (XSS) vulnerability in synnefoclient in Synnefo Internet Management Software...CVE-2015-82474.3 MediumDecember 15, 2015
schneider-electric proclimaThe F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows...CVE-2015-85616.8 MediumDecember 15, 2015
schneider-electric proclimaMultiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric...CVE-2015-79186.8 MediumDecember 15, 2015
apache commons collectionsInsecure Deserialization in Apache Commons CollectionCVE-2015-6420Public exploitFix availableEPSS 24.2%9.8 CriticalDecember 15, 2015
cisco secure firewall management centerCisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to...CVE-2015-64115.0 MediumDecember 15, 2015
cisco hosted collaboration solutionCisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote...CVE-2015-64044.0 MediumDecember 15, 2015
cisco spa300 firmware, spa500 firmware +1 moreThe TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly...CVE-2015-64037.2 HighDecember 15, 2015
cisco integrated management controller supervisorThe Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9)...CVE-2015-63996.8 MediumDecember 15, 2015
cisco iosThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on...CVE-2015-63596.1 MediumDecember 15, 2015
ibm websphere application serverThe Edge Component Caching Proxy in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.12...CVE-2015-50044.0 MediumDecember 15, 2015
cisco unified communications managerCisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an...CVE-2015-42064.3 MediumDecember 15, 2015
linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +1 more +3 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0...CVE-2015-8560Fix available7.3 HighDecember 15, 2015
pygments, canonical ubuntu linux +1 moreCommand Injection in PygmentsCVE-2015-8557Fix available9.0 CriticalDecember 15, 2015
isc bind, oracle linux, solaris +1 more +3 moredb.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers...CVE-2015-8000Fix availableEPSS 55.9%5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe WebExtension APIs in Mozilla Firefox before 43.0 allow remote attackers to gain privileges,...CVE-2015-7223Fix available4.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla...CVE-2015-7222Fix available6.8 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/nsDeque.cpp in Mozilla...CVE-2015-7221Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp in Mozilla Firefox before 43...CVE-2015-7220Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...CVE-2015-7219Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote attackers to cause a...CVE-2015-7218Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...CVE-2015-7217Fix available4.3 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly...CVE-2015-7216Fix available6.8 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreThe importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0...CVE-2015-7215Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the...CVE-2015-7214Public exploitFix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in...CVE-2015-7213Fix available6.8 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in...CVE-2015-7212Fix available7.5 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 mishandles the # (number sign) character in a data: URI, which allows...CVE-2015-7211Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreUse-after-free vulnerability in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5...CVE-2015-7210Fix available7.5 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 stores cookies containing vertical tab characters, which allows...CVE-2015-7208Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 does not properly restrict the availability of IFRAME Resource Timing...CVE-2015-7207Fix available5.0 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreInteger underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0...CVE-2015-7205Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMozilla Firefox before 43.0 does not properly store the properties of unboxed objects, which...CVE-2015-7204Fix available6.8 MediumDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreBuffer overflow in the DirectWriteFontInfo::LoadFontFamilyData function in gfx/thebes...CVE-2015-7203Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 allow...CVE-2015-7202Fix available10.0 HighDecember 15, 2015
mozilla firefox, fedoraproject fedora, opensuse leap +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and...CVE-2015-7201Fix available10.0 HighDecember 15, 2015
apache subversion, debian linux +1 moreInteger overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1...CVE-2015-5343Fix availableEPSS 30.2%7.6 HighDecember 15, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open