Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
December

CVEs published in December 2015

662 vulnerabilities, 198 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 moreThe lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive...CVE-2015-8919Fix available7.5 HighDecember 31, 2015
libarchive, canonical ubuntu linux, debian linux +2 morebsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL...CVE-2015-8917Fix available7.5 HighDecember 31, 2015
libarchive, canonical ubuntu linux, debian linux +2 morebsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the...CVE-2015-8916Fix available6.5 MediumDecember 31, 2015
imagemagickThe ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows...CVE-2015-8903Fix available6.5 MediumDecember 31, 2015
imagemagickThe ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote...CVE-2015-8902Fix available6.5 MediumDecember 31, 2015
imagemagickImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service ...CVE-2015-8901Fix available6.5 MediumDecember 31, 2015
imagemagickThe ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to...CVE-2015-8900Fix available5.5 MediumDecember 31, 2015
thekelleys dnsmasq, canonical ubuntu linux +1 moreDnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with...CVE-2015-8899Fix available7.5 HighDecember 31, 2015
imagemagickThe WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote...CVE-2015-8898Fix available5.5 MediumDecember 31, 2015
imagemagickThe SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote...CVE-2015-8897Fix available5.5 MediumDecember 31, 2015
imagemagickDouble free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers...CVE-2015-8894Fix available5.5 MediumDecember 31, 2015
dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12...CVE-2015-8872Fix available6.2 MediumDecember 31, 2015
freedesktop poppler, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler...CVE-2015-8868Fix available7.8 HighDecember 31, 2015
php, apple mac os x +1 moreThe file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in...CVE-2015-8865Fix available7.3 HighDecember 31, 2015
phpext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a...CVE-2015-8838Fix available5.9 MediumDecember 31, 2015
phpThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...CVE-2015-8835Fix available9.8 CriticalDecember 31, 2015
linux kernel, canonical ubuntu linux, novell suse linux enterprise real time extension +2 moredrivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify...CVE-2015-8812Fix availableEPSS 14.5%9.8 CriticalDecember 31, 2015
nettle project nettle, canonical ubuntu linux, opensuse leap +1 more +3 moreThe ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry...CVE-2015-8805Fix available9.8 CriticalDecember 31, 2015
nettle project nettle, canonical ubuntu linux, opensuse leap +1 more +3 morex86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and...CVE-2015-8804Fix available9.8 CriticalDecember 31, 2015
nettle project nettle, canonical ubuntu linux, opensuse leap +1 more +3 moreThe ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry...CVE-2015-8803Fix available9.8 CriticalDecember 31, 2015
linux kernelThe nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4...CVE-2015-8787Fix available9.8 CriticalDecember 31, 2015
linux kernel, suse linux enterprise real time extension +1 moreThe fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local...CVE-2015-8785Fix available6.2 MediumDecember 31, 2015
libtiff, debian linux +1 moreThe NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of...CVE-2015-8784Fix available6.5 MediumDecember 31, 2015
libtiff, debian linux +1 moreThe putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to...CVE-2015-8683Fix available5.5 MediumDecember 31, 2015
qemu, debian linux +1 moreHeap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.CVE-2015-8666Fix available7.9 HighDecember 31, 2015
libtifftif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of...CVE-2015-8665Fix available5.5 MediumDecember 31, 2015
qemu, debian linux +1 moreStack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI...CVE-2015-8613Fix available6.5 MediumDecember 31, 2015
ntpThe getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows...CVE-2015-8158Fix available5.9 MediumDecember 31, 2015
ntpNTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp...CVE-2015-8138Fix available5.3 MediumDecember 31, 2015
ntpNTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service ...CVE-2015-7979Fix availableEPSS 11.9%7.5 HighDecember 31, 2015
ntpNTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service...CVE-2015-7978Fix available7.5 HighDecember 31, 2015
ntp, canonical ubuntu linux, debian linux +6 more +8 morentpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of...CVE-2015-7977Fix available5.9 MediumDecember 31, 2015
ntp, novell suse openstack cloud, opensuse leap +6 more +8 moreThe ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77...CVE-2015-7976Fix available4.3 MediumDecember 31, 2015
ntpThe nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the...CVE-2015-7975Fix available6.2 MediumDecember 31, 2015
ntp, canonical ubuntu linux, freebsd +4 more +6 moreNTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the...CVE-2015-7973Fix available6.5 MediumDecember 31, 2015
mozilla firefox, network security services, canonical ubuntu linux +2 more +4 moreMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...CVE-2015-7575Fix available5.9 MediumDecember 31, 2015
debian linux, linux kernel, canonical ubuntu linux +1 more +3 morearch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during...CVE-2015-7513Fix available6.5 MediumDecember 31, 2015
gnupg libgcrypt, canonical ubuntu linux, debian linux +2 moreLibgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during...CVE-2015-7511Fix available2.0 LowDecember 31, 2015
pixmanAn integer overflow issue has been reported in the general_composite_rect() function in pixman...CVE-2015-5297Fix available6.7 MediumDecember 31, 2015
zte zxhn h108n r1a firmware, zxv10 w300 firmware +1 moreZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0...CVE-2015-8703Public exploit6.5 MediumDecember 30, 2015
corega cg-wlncm4g firmwareCorega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a...CVE-2015-77945.8 MediumDecember 30, 2015
corega cg-wlbaragm firmwareCorega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to...CVE-2015-77935.8 MediumDecember 30, 2015
corega cg-wlbargs firmwareCorega CG-WLBARGS devices allow remote attackers to perform administrative operations via...CVE-2015-77929.8 CriticalDecember 30, 2015
asus wl-330nul firmwareCross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0...CVE-2015-77906.1 MediumDecember 30, 2015
asus wl-330nul, wl-33nul firmware +1 moreASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a...CVE-2015-77894.3 MediumDecember 30, 2015
asus wl-330nul firmwareASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute...CVE-2015-77887.3 HighDecember 30, 2015
asus wl-330nul firmwareASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the...CVE-2015-77874.3 MediumDecember 30, 2015
bokublock bbadminviewscontrol, bbadminviewscontrol213 +1 moreSQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2)...CVE-2015-77844.3 MediumDecember 30, 2015
let\'s php\! frame high-speed chatCross-site scripting (XSS) vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22...CVE-2015-77826.1 MediumDecember 30, 2015
zte zxhn h108n r1a firmwareCross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before...CVE-2015-7252Public exploit6.1 MediumDecember 30, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open