CVE-2015-0928: libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
Published Aug 28, 2017 · Updated Aug 6, 2024
CVE archive
August 2015
Browse CVE records published in August 2015, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 26 of 876 matching CVEs · Page 18 of 18.
CVE-2015-0851: XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly ha...
XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.
Published Aug 12, 2015 · Updated Aug 6, 2024
CVE-2015-0839: The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attack...
The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
Published Aug 2, 2017 · Updated Aug 6, 2024
CVE-2015-0786: Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks C...
Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0782: SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configurat...
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0783: The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to...
The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0784: Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session ID...
Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0785: com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM)...
com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0781: Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration...
Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0780: SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks...
SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published Aug 9, 2017 · Updated Aug 6, 2024
CVE-2015-0573: drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm...
drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call.
Published Aug 7, 2016 · Updated Aug 6, 2024
CVE-2015-0568: Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MS...
Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.
Published Aug 7, 2016 · Updated Aug 6, 2024
CVE-2015-0542: Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow re...
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users.
Published Aug 20, 2015 · Updated Aug 6, 2024
CVE-2015-0534: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J befor...
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, a similar issue to CVE-2014-8275.
Published Aug 20, 2015 · Updated Aug 6, 2024
CVE-2015-0537: Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x be...
Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292.
Published Aug 20, 2015 · Updated Aug 6, 2024
CVE-2015-0533: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9...
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message, a similar issue to CVE-2014-3572.
Published Aug 20, 2015 · Updated Aug 6, 2024
CVE-2015-0536: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9...
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allow remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero, a similar issue to CVE-2015-1787.
Published Aug 20, 2015 · Updated Aug 6, 2024
CVE-2015-0535: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9...
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.
Published Aug 20, 2015 · Updated Aug 6, 2024
CVE-2015-0298: Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 al...
Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.
Published Aug 24, 2015 · Updated Aug 6, 2024
CVE-2015-0277: The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience ele...
The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.
Published Aug 17, 2015 · Updated Aug 6, 2024
CVE-2015-0233: Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.
Published Aug 28, 2017 · Updated Aug 6, 2024
CVE-2015-0194: XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Ga...
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.
Published Aug 2, 2017 · Updated Aug 6, 2024
CVE-2015-0234: Multiple temporary file creation vulnerabilities in pki-core 10.2.0.
Multiple temporary file creation vulnerabilities in pki-core 10.2.0.
Published Aug 28, 2017 · Updated Aug 6, 2024
CVE-2015-0210: wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to ca...
wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.
Published Aug 28, 2017 · Updated Aug 6, 2024
CVE-2015-0114: Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
Published Aug 28, 2017 · Updated Aug 6, 2024
CVE-2015-0101: Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x b...
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5.
Published Aug 28, 2017 · Updated Aug 6, 2024