CVEs published in December 2015
662 vulnerabilities, 198 critical, 4 exploited.
- vmware vcenter orchestrator, vrealize orchestrator +1 moreSerialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x,...7.3 High
- juniper screenosThe encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3...5.0 Medium
- juniper screenosJuniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b,...9.8 Critical
- cisco ios, ios xe +1 moreThe IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote...5.0 Medium
- symantec endpoint encryptionEACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE...2.3 Low
- cisco dpq3925 8x4 docsis 3.0 wireless residential gateway with embedded digital voice adapterCisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive information...5.0 Medium
- cisco firesight system softwareCisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection...5.0 Medium
- cisco prime network services controllerCisco Prime Network Services Controller 3.0 allows local users to bypass intended access...7.2 High
- cisco application policy infrastructure controllerThe boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows...7.2 High
virtualbox-oseDebianvirtualbox-ose - end of supportNo score- blueman project bluemanblueman - security update8.4 High
- redhat libvirtDirectory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage...2.5 Low
- google chromeThe MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of...9.8 Critical
- token insert entity project insert entityThe Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check...3.5 Low
- chat room project roomThe Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when...5.0 Medium
- sap mobile platformThe SysAdminWebTool servlets in SAP Mobile Platform allow remote attackers to bypass...7.5 High
- ntop ntopngntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and...6.0 Medium
- xenThe libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of...7.8 High
- xenThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly...4.7 Medium
- xenThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand...4.7 Medium
- xenXen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1)...7.2 High
- cool video gallery project video gallerylib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to...7.5 High
- theforeman foremanMultiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10...4.3 Medium
- apache cordova file transferCRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file...4.3 Medium
- acunetix web vulnerability scannerThe AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build...7.2 High
- linux kernelThe sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not...4.0 Medium
- debian linux, xen, canonical ubuntu linux +2 more +4 moreThe PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x...4.4 Medium
- debian linux, linux kernel, opensuse +5 more +7 moreThe PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x...6.0 Medium
- xen, novell suse linux enterprise real time extension +1 moreXen, when used on a system providing PV backends, allows local guest OS administrators to cause a...8.2 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C...7.2 High
- tryton trytond, debian linux +1 moretrytond arbitrary fields write via a sequence of records4.3 Medium
potraceMageiaUpdated potrace packages fix security vulnerabilitiesNo score- quassel-irc quassel, opensuse leap, opensuse +2 moreThe CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0...7.5 High
- foxitsoftware foxit reader, phantompdf +1 moreMultiple use-after-free vulnerabilities in the (1) Print method and (2) App object handling in...6.8 Medium
- joomla sessionJoomla! Framework Remote Code Injection Vulnerability7.5 High
- joomla joomla\!Directory traversal vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows...7.5 High
- joomla joomla\!Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have...7.5 High
- joomla joomla\!Cross-site request forgery (CSRF) vulnerability in the com_templates component in Joomla! 3.2.0...6.8 Medium
- joomla joomla\!Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection...7.5 High
- bitrix mpbuilderDirectory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows...9.0 High
- bitrix xscanDirectory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows...6.5 Medium
- redhat jboss enterprise application platformRed Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize...3.5 Low
- kaspersky total security 2015Kaspersky Total Security 2015 15.0.2.361 allocates memory with Read, Write, Execute (RWX)...6.4 Medium
- avg internet securityAVG Internet Security 2015 allocates memory with Read, Write, Execute (RWX) permissions at...6.4 Medium
- mcafee virusscan enterpriseThe Buffer Overflow Protection (BOP) feature in McAfee VirusScan Enterprise before 8.8 Patch 6...2.6 Low
cupsUbuntucups updateNo score- isc bindRace condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3...7.1 High
- cisco unified communications managerThe WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0...5.0 Medium
- qemu, debian linux +1 moreMemory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows...6.5 Medium
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...7.7 High
- Show moreLoading…