CVEs published in December 2015
662 vulnerabilities, 198 critical, 4 exploited.
- mediawikiThe User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x...9.8 Critical
- mediawikiMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...7.5 High
- mediawikiThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before...8.8 High
- mediawikiThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x...8.8 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25...6.1 Medium
- keepassx project keepassxIn KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML...7.5 High
- ffmpegThe ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and...8.3 High
- ffmpegThe ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate...7.3 High
- ffmpegThe h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not...8.3 High
- adcon a840 telemetry gateway base station firmwareThe Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to...8.6 High
- adcon a840 telemetry gateway base station firmwareAdcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive...8.6 High
- adcon a840 telemetry gateway base station firmwareThe Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the...8.7 High
- adcon a840 telemetry gateway base station firmwareAdcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows...10.0 Critical
- dovestones ad self password resetThe PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in...10.0 Critical
- ewon firmwareeWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow...4.3 Medium
- ewon firmwareeWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password...8.5 High
- ewon firmwareCross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows...6.1 Medium
- ewon firmwareeWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests...9.9 Critical
- ewon firmwareCross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0...8.0 High
- ewon firmwareeWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in...8.8 High
libksbaSUSESecurity update for libksbaNo scorelibksbaSUSERecommended update for libksbaNo scorelibksbaSUSERecommended update for libksbaNo score- motorola moscad ip gateway firmwareCross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows...7.5 High
- motorola moscad ip gateway firmwareMotorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via...7.5 High
- opcsystems opc systems.netUntrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier...7.2 High
- saia burgess controls pcd1.m0xx0 firmware, pcd1.m2xx0 firmware, pcd2.m5xx0 firmware +11 more +13 moreSaia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV,...9.1 Critical
- rsa securid web agentEMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy...6.7 Medium
- eaton proviewEaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and...5.3 Medium
- cisco ios xeCisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a...6.5 Medium
- google chromeInteger overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in...8.8 High
- qemu, debian linux +1 moreThe Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service ...7.5 High
- isc keaThe kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging...6.8 Medium
- linux kernelfs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a...4.4 Medium
- phusionpassenger phusion passengerPhusion Passenger allows remote attackers to spoof headers3.7 Low
- emc isilon onefsEMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote...8.0 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreHeap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x...6.8 Medium
- schneider-electric bmxnoc0401, bmxnoe0100, bmxnoe0100h +10 more +12 moreStack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC...10.0 High
- searchbloxSearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently...10.0 Critical
- honeywell midas black firmware, midas firmware +1 moreHoneywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow...9.3 High
- honeywell midas black firmware, midas firmware +1 moreDirectory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1...8.6 High
- loytec l-switch and l-ip firmwareLOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to...10.0 High
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF19 and 8...4.3 Medium
- moxa oncell central managerThe login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a...8.3 High
- moxa oncell central managerThe MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require...8.3 High
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...4.3 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1...6.1 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1...6.1 Medium
- apache hbase, ibm infosphere biginsights +1 moreHigh severity vulnerability that affects org.apache.hbase:hbase7.3 High
- apache hive, ibm infosphere biginsights +1 moreImproper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service7.3 High
- Show moreLoading…