Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-17

CWE-17 vulnerabilities

Known exploitedIn KEVPublic exploitFix available

type74 edType74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for...CVE-2015-2987Fix available2.6 LowAugust 28, 2015
netfilter conntrack-tools, debian linux +1 moreconntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules...CVE-2015-6496Fix available5.0 MediumAugust 19, 2015
codfront labs http strict transport securityThe HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1...CVE-2015-55056.8 MediumAugust 18, 2015
picketlinkThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...CVE-2015-62546.0 MediumAugust 17, 2015
apple iphone os, mac os x, safari +2 moreThe kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes, which allows local...CVE-2015-57482.1 LowAugust 16, 2015
juniper pulse connect securePulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1...CVE-2015-53694.3 MediumAugust 11, 2015
redhat jboss portalThe PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not...CVE-2015-51765.8 MediumAugust 11, 2015
linux kernelarch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not...CVE-2015-3291Fix available2.1 LowJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 moreThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...CVE-2015-1288Fix available6.8 MediumJuly 23, 2015
linuxcontainers lxcattach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local...CVE-2015-1334Fix available4.6 MediumJuly 22, 2015
google chrome, opensuse +1 moreThe regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89,...CVE-2015-5605Fix available5.0 MediumJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...CVE-2015-1287Fix available4.3 MediumJuly 22, 2015
ibm db2The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5,...CVE-2015-19358.0 HighJuly 20, 2015
apache http serverThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...CVE-2015-3183Fix availableEPSS 74.4%5.0 MediumJuly 20, 2015
f5 big-iq cloud, big-iq adc, big-iq device +1 more +3 moreThe REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0...CVE-2015-46374.3 MediumJuly 16, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 morePDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...CVE-2015-2743Fix available7.5 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 HighJuly 4, 2015
ibm tivoli directory serverIBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44,...CVE-2015-20192.1 LowJune 28, 2015
ibm websphere mq internet pass thruThe HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM...CVE-2015-01734.3 MediumJune 28, 2015
linux kernelThe bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6...CVE-2015-4700Fix available4.9 MediumJune 24, 2015
microsoft windows media playerMicrosoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code...CVE-2015-1728EPSS 17.6%9.3 HighJune 10, 2015
redislabs redis, debian linux +1 moreRedis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua...CVE-2015-4335Fix available10.0 HighJune 6, 2015
linux kernel, google android +1 moreThe (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16...CVE-2015-1805Public exploitFix available7.2 HighJune 3, 2015
moodleMoodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering...CVE-2015-31773.5 LowJune 1, 2015
netapp oncommand workflow automationThe installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up...CVE-2015-3292Public exploitEPSS 12.4%10.0 HighMay 31, 2015
apple iphone os, itunes, mac os x +2 moreCoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service ...CVE-2015-1157Public exploit7.8 HighMay 28, 2015
qemuThe slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with...CVE-2015-4037Fix available1.9 LowMay 23, 2015
google chrome, debian linux +1 moreThe Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS...CVE-2015-1263Fix available4.3 MediumMay 20, 2015
google chrome, debian linux +1 morePDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which...CVE-2015-1259Fix available7.5 HighMay 20, 2015
google chrome, debian linux +1 moreplatform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65,...CVE-2015-1262Fix available7.5 HighMay 20, 2015
wouter verhelst nbd, canonical ubuntu linux +1 morenbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals,...CVE-2015-0847Fix available7.8 HighMay 17, 2015
mozilla firefoxThe update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the...CVE-2015-27204.4 MediumMay 14, 2015
apple os x serverThe Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in...CVE-2015-11505.0 MediumApril 28, 2015
ibm curam social program managementIBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6...CVE-2014-60925.0 MediumApril 27, 2015
google chrome, debian linux, opensuse +2 morebrowser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not...CVE-2015-3334Fix available4.3 MediumApril 19, 2015
openstack keystonemiddleware, python-keystoneclient, canonical ubuntu linux +2 moreOpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacksCVE-2015-1852Fix available4.3 MediumApril 17, 2015
tuxfamily chrony, debian linux +1 morechrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged...CVE-2015-1822Fix available6.5 MediumApril 12, 2015
juniper junosJuniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15,...CVE-2015-30026.9 MediumApril 10, 2015
apple iphone osThe touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to...CVE-2015-11254.3 MediumApril 10, 2015
ntpThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2...CVE-2015-1798Fix available1.8 LowApril 8, 2015
xen, fedoraproject fedora +1 moreXen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with...CVE-2015-2751Fix available7.1 HighApril 1, 2015
google chromeGoogle Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad...CVE-2015-1233Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...CVE-2015-0812Fix available4.3 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox...CVE-2015-0808Fix available5.0 MediumApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to...CVE-2015-0806Fix available7.5 HighApril 1, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an...CVE-2015-0805Fix available7.5 HighApril 1, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open