Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
December

CVEs published in December 2015

662 vulnerabilities, 198 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

zte zxhn h108n r1a firmwareZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for...CVE-2015-7251Public exploitEPSS 10.7%9.8 CriticalDecember 30, 2015
zte zxhn h108n r1a firmwareAbsolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE...CVE-2015-7250Public exploitEPSS 15.5%7.5 HighDecember 30, 2015
zte zxhn h108n r1a firmwareZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated users to...CVE-2015-7249Public exploit4.9 MediumDecember 30, 2015
zte zxhn h108n r1a firmwareZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover...CVE-2015-7248Public exploit7.5 HighDecember 30, 2015
rarlab winrarThe file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain...CVE-2015-56637.4 HighDecember 30, 2015
cacti Debiancacti - regression updateDLA-374-2Fix availableNo scoreDecember 30, 2015
linux kernelThe keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not...CVE-2015-7550Fix available5.5 MediumDecember 30, 2015
welcart e-commerceMultiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for...CVE-2015-77916.3 MediumDecember 29, 2015
nttdata web analytics serviceCross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11...CVE-2015-77866.1 MediumDecember 29, 2015
adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...CVE-2015-8651In KEVFix availableEPSS 67.7%8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8650Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8649Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8648Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8647Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8646Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and...CVE-2015-8645Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and...CVE-2015-8644Public exploitFix availableEPSS 26.1%8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8643Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8642Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8641Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8640Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8639Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8638Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and...CVE-2015-8636Public exploitFix availableEPSS 21.4%8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8635Public exploitFix availableEPSS 25.5%8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20...CVE-2015-8634Public exploitFix availableEPSS 25.5%8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and...CVE-2015-8460Fix available8.8 HighDecember 28, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and...CVE-2015-8459Fix available10.0 CriticalDecember 28, 2015
emc secure remote servicesDirectory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x...CVE-2015-68524.3 MediumDecember 28, 2015
emc vplex geosynchronyEMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the...CVE-2015-68508.4 HighDecember 28, 2015
linux kernelThe ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to...CVE-2015-8660Public exploitFix availableEPSS 22.2%6.7 MediumDecember 28, 2015
linux kernelThe (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel...CVE-2015-8569Fix available2.3 LowDecember 28, 2015
linux kernelThe networking implementation in the Linux kernel through 4.3.3, as used in Android and other...CVE-2015-8543Public exploitFix available7.0 HighDecember 28, 2015
linux kernelfs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which...CVE-2015-8374Fix available4.0 MediumDecember 28, 2015
let\'s php\! pbbsCross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers...CVE-2015-77836.1 MediumDecember 27, 2015
tails project tailsTails before 1.7 includes the wget program but does not prevent automatic fallback from passive...CVE-2015-76655.3 MediumDecember 27, 2015
ephiphanyheathdata cardio serverThe login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests,...CVE-2015-65389.8 CriticalDecember 27, 2015
epiphanyhealthdata cardio serverSQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote...CVE-2015-65379.8 CriticalDecember 27, 2015
netgear wnr1000v3, wnr1000v3 firmware +1 moreNETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS...CVE-2015-82638.6 HighDecember 27, 2015
buffalotech airstation extreme n600, airstation extreme n600 firmware +1 moreBuffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for...CVE-2015-82626.8 MediumDecember 27, 2015
rsi video technologies frontel protocolThe Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity...CVE-2015-82545.9 MediumDecember 27, 2015
rsi video technologies frontel protocolThe Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption...CVE-2015-82533.7 LowDecember 27, 2015
rsi video technologies frontel protocolThe Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext...CVE-2015-82525.9 MediumDecember 27, 2015
progress whatsup goldMultiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow...CVE-2015-60056.9 MediumDecember 27, 2015
progress whatsup goldMultiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote...CVE-2015-60046.5 MediumDecember 27, 2015
phpmyadminlibraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2,...CVE-2015-8669Fix available5.3 MediumDecember 26, 2015
cisco jabberCisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct...CVE-2015-64095.9 MediumDecember 26, 2015
proftpd MageiaUpdated proftpd packages fix security vulnerabilitiesMGASA-2015-0485Fix availableNo scoreDecember 24, 2015
mediawikiThe (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads,...CVE-2015-8628Fix available5.3 MediumDecember 24, 2015
mediawikiMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...CVE-2015-8627Fix available5.3 MediumDecember 24, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open