cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:-:gold cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~

CVE-2015-0001

2015-01-13T17:59:00.050-05:00

2018-10-12T18:07:48.240-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html SECUNIA 62134 BID 71927 MS MS15-006 XF ms-wer-cve20150001-security-bypass(99513) XF win-ms15kb3004365-update(99514) The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:-:gold cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~

CVE-2015-0002

2015-01-13T17:59:01.253-05:00

2018-10-12T18:07:49.053-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 61277 MISC http://twitter.com/sambowne/statuses/550384131683520512 BID 71972 MISC http://www.zdnet.com/article/google-discloses-unpatched-windows-vulnerability/ MISC https://code.google.com/p/google-security-research/issues/detail?id=118 MS MS15-001 XF ms-appcompatcache-cve20150002-priv-esc(99523) XF win-ms15kb3023266-update(99524) The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with an administrative account, which allows local users to gain privileges by running AppCompatCache.exe with a crafted DLL file, aka MSRC ID 20544 or "Microsoft Application Compatibility Infrastructure Elevation of Privilege Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2003:-:sp2 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~ cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~ cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2 cpe:/o:microsoft:windows_vista:-:sp2

CVE-2015-0003

2015-02-10T22:00:28.763-05:00

2019-05-14T15:39:48.313-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T15:10:21.220-04:00

BID 72457 MS MS15-010 XF ms-kmd-cve20150003-priv-esc(100430) win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:-:gold cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~ cpe:/o:microsoft:windows_vista:-:sp2

CVE-2015-0004

2015-01-13T17:59:02.597-05:00

2018-10-12T18:07:50.490-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 61927 BID 71967 MISC https://code.google.com/p/google-security-research/issues/detail?id=123 MS MS15-003 XF ms-profsvc-cve20150004-priv-esc(99519) XF win-ms15kb3021674-update(99520) The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction attack to load another user's UsrClass.dat registry hive, aka MSRC ID 20674 or "Microsoft User Profile Service Elevation of Privilege Vulnerability."

cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_server_2008::sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2::~~datacenter~~~ cpe:/o:microsoft:windows_server_2012:r2::~~essentials~~~ cpe:/o:microsoft:windows_server_2012:r2::~~standard~~~

CVE-2015-0005

2015-03-11T06:59:00.087-04:00

2019-05-08T18:03:15.720-04:00

4.3

ADJACENT_NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/130773/Windows-Pass-Through-Authentication-Methods-Improper-Validation.html FULLDISC 20150310 [CORE-2015-0005] - Windows Pass-Through Authentication Methods Improper Validation MISC http://www.coresecurity.com/advisories/windows-pass-through-authentication-methods-improper-validation SECTRACK 1031891 MS MS15-027 CONFIRM https://www.samba.org/samba/history/samba-4.2.10.html The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, aka "NETLOGON Spoofing Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~ cpe:/o:microsoft:windows_vista:-:sp2

CVE-2015-0006

2015-01-13T17:59:03.580-05:00

2018-10-12T18:07:51.803-04:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov SECUNIA 62098 SECUNIA 62184 BID 71930 MS MS15-005 XF ms-nla-cve20150006-security-bypass(99521) XF win-ms15kb3022777-update(99522) The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not perform mutual authentication to determine a domain connection, which allows remote attackers to trigger an unintended permissive configuration by spoofing DNS and LDAP responses on a local network, aka "NLA Security Feature Bypass Vulnerability."

CVE-2015-0007

2017-05-11T10:29:44.060-04:00

2017-05-11T10:29:44.077-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0008

2015-02-10T22:00:29.607-05:00

2019-05-15T13:19:01.267-04:00

8.3

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-15T09:16:43.607-04:00

CONFIRM http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx CERT-VN VU#787252 BID 72477 SECTRACK 1031719 MS MS15-011 XF ms-grouppolicy-cve20150008-code-exec(100426) MISC https://www.jasadvisors.com/additonal-jasbug-security-exploit-info/ The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client, which allows remote attackers to execute arbitrary code by making crafted data available on a UNC share, as demonstrated by Group Policy data from a spoofed domain controller, aka "Group Policy Remote Code Execution Vulnerability."

CVE-2015-0009

2015-02-10T22:00:30.700-05:00

2019-05-15T13:10:28.227-04:00

3.3

ADJACENT_NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T15:09:27.140-04:00

CONFIRM http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx BID 72476 SECTRACK 1031722 MS MS15-014 The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to disable a signing requirement and trigger a revert-to-default action by spoofing domain-controller responses, aka "Group Policy Security Feature Bypass Vulnerability."

CVE-2015-0010

2015-02-10T22:00:31.480-05:00

2019-05-15T13:04:22.547-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T15:07:07.840-04:00

MISC http://code.google.com/p/google-security-research/issues/detail?id=128 BID 72461 MS MS15-010 The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token's level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka "CNG Security Feature Bypass Vulnerability" or MSRC ID 20707.

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:-:gold cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~

CVE-2015-0011

2015-01-13T17:59:04.470-05:00

2018-10-12T18:07:54.053-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

NONE

http://nvd.nist.gov SECUNIA 62154 BID 71960 SECTRACK 1031531 MS MS15-008 XF win-ms15kb3019215-update(99526) XF ms-webdav-cve20150011-priv-esc(99527) mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass an impersonation protection mechanism, and obtain privileges for redirection of WebDAV requests, via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability."

cpe:/a:microsoft:virtual_machine_manager:2012:r2_rollup4

CVE-2015-0012

2015-02-10T22:00:32.230-05:00

2018-11-20T15:29:31.673-05:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2018-11-20T09:03:57.247-05:00

BID 72473 SECTRACK 1031726 SECTRACK 1034652 MS MS15-017 XF ms-vmmanager-cve20150012-priv-esc(100428) Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machine Manager Elevation of Privilege Vulnerability."

CVE-2015-0013

2017-05-11T10:29:44.093-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~ cpe:/o:microsoft:windows_vista:-:sp2

CVE-2015-0014

2015-01-13T17:59:05.580-05:00

2018-10-12T18:07:55.427-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 61580 BID 71968 SECTRACK 1031523 MS MS15-002 XF ms-telnet-cve20150014-code-exec(99517) XF win-ms15kb3020393-update(99518) Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."

cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2012:-:gold cpe:/o:microsoft:windows_server_2012:r2::~~~x64~~

CVE-2015-0015

2015-01-13T17:59:06.363-05:00

2018-10-12T18:07:56.350-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 62148 BID 71933 SECTRACK 1031532 MS MS15-007 Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server (NPS), aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."

CVE-2015-0016

2015-01-13T17:59:07.190-05:00

2018-10-12T18:07:56.727-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox/ MISC http://packetstormsecurity.com/files/130201/MS15-004-Microsoft-Remote-Desktop-Services-Web-Proxy-IE-Sandbox-Escape.html SECUNIA 62076 EXPLOIT-DB 35983 BID 71965 SECTRACK 1031524 MS MS15-004 XF ms-windows-cve20150016-priv-esc(99515) XF win-ms15kb3025421-update(99516) Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted pathname in an executable file, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Directory Traversal Elevation of Privilege Vulnerability."

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0017

2015-02-10T22:00:34.527-05:00

2018-10-12T18:07:57.897-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72402 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.

cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0018

2015-02-10T22:00:35.387-05:00

2018-10-12T18:07:58.210-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72403 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0037, CVE-2015-0040, and CVE-2015-0066.

cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10

CVE-2015-0019

2015-02-10T22:00:36.153-05:00

2018-10-12T18:07:58.570-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72425 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

CVE-2015-0020

2015-02-10T22:00:36.917-05:00

2018-10-12T18:07:58.927-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72426 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10

CVE-2015-0021

2015-02-10T22:00:37.683-05:00

2018-10-12T18:07:59.303-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72436 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

CVE-2015-0022

2015-02-10T22:00:38.450-05:00

2018-10-12T18:07:59.617-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72437 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.

cpe:/a:microsoft:internet_explorer:10

CVE-2015-0023

2015-02-10T22:00:39.183-05:00

2018-10-12T18:07:59.880-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72438 SECTRACK 1031723 MS MS15-009 IDEFENSE 20150210 Microsoft Internet Explorer CTreeNode Use-after-Free Vulnerability Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0025.

CVE-2015-0024

2017-05-11T10:29:44.107-04:00

2017-05-11T10:29:44.123-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:microsoft:internet_explorer:10

CVE-2015-0025

2015-02-10T22:00:39.950-05:00

2018-10-12T18:08:00.287-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72439 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0023.

CVE-2015-0026

2015-02-10T22:00:40.793-05:00

2018-10-12T18:08:00.587-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72440 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0027

2015-02-10T22:00:41.590-05:00

2018-10-12T18:08:00.927-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72441 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0035, CVE-2015-0039, CVE-2015-0052, and CVE-2015-0068.

cpe:/a:microsoft:internet_explorer:9

CVE-2015-0028

2015-02-10T22:00:42.387-05:00

2018-10-12T18:08:01.273-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72442 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0048.

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8

CVE-2015-0029

2015-02-10T22:00:43.183-05:00

2018-10-12T18:08:01.507-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72443 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

CVE-2015-0030

2015-02-10T22:00:43.950-05:00

2018-10-12T18:08:01.740-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72444 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.

CVE-2015-0031

2015-02-10T22:00:44.667-05:00

2018-10-12T18:08:01.990-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72445 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0036, and CVE-2015-0041.

cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:- cpe:/a:microsoft:vbscript:5.6 cpe:/a:microsoft:vbscript:5.7 cpe:/a:microsoft:vbscript:5.8

CVE-2015-0032

2015-03-11T06:59:01.290-04:00

2018-10-12T18:08:02.303-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72910 SECTRACK 1031887 SECTRACK 1031888 MS MS15-018 MS MS15-019 vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "VBScript Memory Corruption Vulnerability."

CVE-2015-0033

2017-05-11T10:29:44.140-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0034

2017-05-11T10:29:44.153-04:00

2017-05-11T10:29:44.170-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0035

2015-02-10T22:00:45.467-05:00

2018-10-12T18:08:02.897-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72447 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0027, CVE-2015-0039, CVE-2015-0052, and CVE-2015-0068.

CVE-2015-0036

2015-02-10T22:00:46.217-05:00

2018-10-12T18:08:03.257-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72446 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, and CVE-2015-0041.

cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0037

2015-02-10T22:00:46.997-05:00

2018-10-12T18:08:03.663-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72448 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0040, and CVE-2015-0066.

cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0038

2015-02-10T22:00:47.763-05:00

2018-10-12T18:08:04.023-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72404 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0042 and CVE-2015-0046.

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0039

2015-02-10T22:00:48.497-05:00

2018-10-12T18:08:04.383-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72409 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0027, CVE-2015-0035, CVE-2015-0052, and CVE-2015-0068.

cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0040

2015-02-10T22:00:49.277-05:00

2018-10-12T18:08:04.633-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://blog.skylined.nl/20161114001.html BUGTRAQ 20161114 CVE-2015-0040: Microsoft Internet Explorer 11 MSHTML CMapElement::Notify use-after-free details BID 72410 SECTRACK 1031723 MS MS15-009 EXPLOIT-DB 40757 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and CVE-2015-0066.

CVE-2015-0041

2015-02-10T22:00:50.137-05:00

2018-10-12T18:08:05.163-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72411 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, and CVE-2015-0036.

cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0042

2015-02-10T22:00:50.870-05:00

2018-10-12T18:08:05.443-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72412 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0038 and CVE-2015-0046.

cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0043

2015-02-10T22:00:51.667-05:00

2018-10-12T18:08:05.787-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72413 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9

CVE-2015-0044

2015-02-10T22:00:52.527-05:00

2018-10-12T18:08:06.087-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72414 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0050.

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8

CVE-2015-0045

2015-02-10T22:00:53.387-05:00

2018-10-12T18:08:06.383-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72415 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0053.

cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0046

2015-02-10T22:00:54.137-05:00

2018-10-12T18:08:06.727-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72416 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0038 and CVE-2015-0042.

CVE-2015-0047

2017-05-11T10:29:44.187-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:microsoft:internet_explorer:9

CVE-2015-0048

2015-02-10T22:00:54.857-05:00

2018-10-12T18:08:07.117-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72417 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0028.

cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:10

CVE-2015-0049

2015-02-10T22:00:55.870-05:00

2018-10-12T18:08:07.477-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72418 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9

CVE-2015-0050

2015-02-10T22:00:56.700-05:00

2018-10-12T18:08:07.850-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov MISC http://blog.skylined.nl/20161122001.html FULLDISC 20161125 CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details BUGTRAQ 20161122 CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details BID 72419 SECTRACK 1031723 MS MS15-009 EXPLOIT-DB 40841 Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.

cpe:/a:microsoft:internet_explorer:8

CVE-2015-0051

2015-02-10T22:00:57.577-05:00

2018-10-12T18:08:08.740-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 72453 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0052

2015-02-10T22:00:58.417-05:00

2018-10-12T18:08:09.053-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72420 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0027, CVE-2015-0035, CVE-2015-0039, and CVE-2015-0068.

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8

CVE-2015-0053

2015-02-10T22:00:59.230-05:00

2018-10-12T18:08:09.383-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72421 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0045.

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0054

2015-02-10T22:01:00.060-05:00

2018-10-12T18:08:09.740-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 72478 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0055

2015-02-10T22:01:00.917-05:00

2018-10-12T18:08:10.023-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 72479 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0056

2015-03-11T06:59:02.320-04:00

2018-10-12T18:08:10.367-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72924 SECTRACK 1031888 MS MS15-018 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1623 and CVE-2015-1626.

CVE-2015-0057

2015-02-10T22:01:01.763-05:00

2019-05-14T14:50:39.423-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:06:06.587-04:00

BID 72466 MS MS15-010 XF ms-kmd-cve20150057-priv-esc(100431) EXPLOIT-DB 39035 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2012:r2

CVE-2015-0058

2015-02-10T22:01:02.527-05:00

2019-05-14T14:51:42.067-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:04:56.430-04:00

BID 72468 MS MS15-010 XF ms-kmd-cve20150058-priv-sec(100432) Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~ cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~ cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2

CVE-2015-0059

2015-02-10T22:01:03.370-05:00

2019-05-14T14:58:33.687-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:03:44.537-04:00

BID 72470 MS MS15-010 XF ms-kmd-cve20150059-code-exec(100433) win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted TrueType font, aka "TrueType Font Parsing Remote Code Execution Vulnerability."

CVE-2015-0060

2015-02-10T22:01:04.217-05:00

2019-05-14T15:01:07.927-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:02:44.803-04:00

BID 72472 MS MS15-010 XF ms-kmd-cve20150060-dos(100434) The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly scale fonts, which allows local users to cause a denial of service (system hang) via a crafted application, aka "Windows Font Driver Denial of Service Vulnerability."

CVE-2015-0061

2015-02-10T22:01:04.950-05:00

2019-05-14T15:10:54.283-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T14:00:44.487-04:00

BID 72456 SECTRACK 1031725 MS MS15-016 XF ms-tiff-cve20150061-info-disc(100435) XF win-ms15kb3029944-update(100436) Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize memory for TIFF images, which allows remote attackers to obtain sensitive information from process memory via a crafted image file, aka "TIFF Processing Information Disclosure Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~ cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~ cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2

CVE-2015-0062

2015-02-10T22:01:05.717-05:00

2019-05-14T14:34:21.100-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:59:35.487-04:00

SECUNIA 62840 BID 72458 SECTRACK 1031724 MS MS15-015 XF ms-windows-cve20150062-priv-esc(100437) XF win-ms15kb3031432-update(100438) Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege, aka "Windows Create Process Elevation of Privilege Vulnerability."

cpe:/a:microsoft:excel:2007:sp3 cpe:/a:microsoft:excel:2010:sp2:~~~~x64~ cpe:/a:microsoft:excel:2010:sp2:~~~~x86~ cpe:/a:microsoft:excel:2013 cpe:/a:microsoft:excel:2013:sp3 cpe:/a:microsoft:excel_2013_rt:- cpe:/a:microsoft:excel_viewer cpe:/a:microsoft:office:2010:sp2:x64 cpe:/a:microsoft:office:2010:sp2:x86 cpe:/a:microsoft:office_compatibility_pack::sp3

CVE-2015-0063

2015-02-10T22:01:06.433-05:00

2018-10-12T18:08:14.087-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 62808 BID 72460 SECTRACK 1031720 MS MS15-012 XF ms-excel-cve20150063-code-exec(100439) Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Excel Remote Code Execution Vulnerability."

cpe:/a:microsoft:office:2010:sp2:x64 cpe:/a:microsoft:office:2010:sp2:x86 cpe:/a:microsoft:office_compatibility_pack::sp3 cpe:/a:microsoft:sharepoint_server:2010 cpe:/a:microsoft:web_applications:2010:sp2 cpe:/a:microsoft:word:2007:sp3 cpe:/a:microsoft:word:2010:sp2 cpe:/a:microsoft:word_automation_services:- cpe:/a:microsoft:word_viewer

CVE-2015-0064

2015-02-10T22:01:07.200-05:00

2018-10-12T18:08:14.727-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 62808 BID 72463 SECTRACK 1031720 MS MS15-012 EXPLOIT-DB 37967 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Office Remote Code Execution Vulnerability."

cpe:/a:microsoft:word:2007:sp3

CVE-2015-0065

2015-02-10T22:01:07.967-05:00

2018-10-12T18:08:15.367-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECUNIA 62808 BID 72465 SECTRACK 1031720 MS MS15-012 EXPLOIT-DB 37966 Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."

cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0066

2015-02-10T22:01:08.700-05:00

2018-10-12T18:08:15.867-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72422 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and CVE-2015-0040.

cpe:/a:microsoft:internet_explorer:6 cpe:/a:microsoft:internet_explorer:7 cpe:/a:microsoft:internet_explorer:8 cpe:/a:microsoft:internet_explorer:9

CVE-2015-0067

2015-02-10T22:01:09.467-05:00

2018-10-12T18:08:16.163-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72423 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0068

2015-02-10T22:01:10.247-05:00

2018-10-12T18:08:16.447-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72424 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0027, CVE-2015-0035, CVE-2015-0039, and CVE-2015-0052.

cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0069

2015-02-10T22:01:10.967-05:00

2018-10-12T18:08:16.837-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 72454 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

CVE-2015-0070

2015-02-10T22:01:11.730-05:00

2018-10-12T18:08:17.133-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 72480 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."

cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0071

2015-02-10T22:01:12.497-05:00

2018-10-12T18:08:17.430-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 72455 SECTRACK 1031723 MS MS15-009 Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

cpe:/a:microsoft:internet_explorer:9 cpe:/a:microsoft:internet_explorer:10 cpe:/a:microsoft:internet_explorer:11:-

CVE-2015-0072

2015-02-07T14:59:07.723-05:00

2018-10-12T18:08:17.727-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://community.websense.com/blogs/securitylabs/archive/2015/02/05/another-day-another-zero-day-internet-explorer-s-turn-cve-2015-0072.aspx MISC http://innerht.ml/blog/ie-uxss.html MISC http://packetstormsecurity.com/files/130308/Microsoft-Internet-Explorer-Universal-XSS-Proof-Of-Concept.html FULLDISC 20150131 Major Internet Explorer Vulnerability - NOT Patched MISC http://www.pcworld.com/article/2879372/dangerous-ie-vulnerability-opens-door-to-powerful-phishing-attacks.html BUGTRAQ 20150209 Cookie hijacking: Internet Explorer UXSS (CVE-2015-0072) BID 72489 SECTRACK 1031888 MS MS15-018 XF ms-ie-cve20150072-xss(100606) MISC https://nakedsecurity.sophos.com/2015/02/04/internet-explorer-has-a-cross-site-scripting-zero-day-bug/ Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka "Universal XSS (UXSS)."

CVE-2015-0073

2015-03-11T06:59:03.197-04:00

2019-05-14T14:36:50.477-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:19:20.947-04:00

BID 72908 SECTRACK 1031899 MS MS15-025 The Windows Registry Virtualization feature in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict changes to virtual stores, which allows local users to gain privileges via a crafted application, aka "Registry Virtualization Elevation of Privilege Vulnerability."

CVE-2015-0074

2015-03-11T06:59:04.027-04:00

2019-05-14T15:21:39.627-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-05-14T14:10:28.687-04:00

BID 72892 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly allocate memory, which allows remote attackers to cause a denial of service via a crafted (1) web site or (2) file, aka "Adobe Font Driver Denial of Service Vulnerability."

cpe:/o:microsoft:windows_2003_server::sp2 cpe:/o:microsoft:windows_7::sp1:x64 cpe:/o:microsoft:windows_7::sp1:x86 cpe:/o:microsoft:windows_server_2008::sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_vista::sp2

CVE-2015-0075

2015-03-11T06:59:04.980-04:00

2018-10-12T18:08:19.853-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 72915 SECTRACK 1031899 MS MS15-025 The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Impersonation Level Check Elevation of Privilege Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2008:-:sp2 cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~ cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~ cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2 cpe:/o:microsoft:windows_vista:-:sp2

CVE-2015-0076

2015-03-11T06:59:06.027-04:00

2019-05-14T14:38:11.873-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T13:20:18.163-04:00

BID 72918 SECTRACK 1031894 MS MS15-029 The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly initialize memory for rendering of JXR images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "JPEG XR Parser Information Disclosure Vulnerability."

CVE-2015-0077

2015-03-11T06:59:07.013-04:00

2019-05-14T14:58:58.407-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T12:32:18.260-04:00

BID 72897 SECTRACK 1031897 MS MS15-023 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize function buffers, which allows local users to obtain sensitive information from kernel memory, and possibly bypass the ASLR protection mechanism, via a crafted application, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability."

cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2

CVE-2015-0078

2015-03-11T06:59:07.997-04:00

2019-05-14T15:01:47.787-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T12:32:55.497-04:00

ALLOWS_ADMIN_ACCESS

BID 72902 SECTRACK 1031897 MS MS15-023 win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate the token of a calling thread, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2

CVE-2015-0079

2015-03-11T06:59:08.920-04:00

2019-05-14T14:53:41.210-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:55:34.903-04:00

SECTRACK 1031892 MS MS15-030 The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service (memory consumption and RDP outage) by establishing many RDP sessions that do not properly free allocated memory, aka "Remote Desktop Protocol (RDP) Denial of Service Vulnerability."

CVE-2015-0080

2015-03-11T06:59:09.827-04:00

2019-05-14T14:52:28.177-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T12:33:48.217-04:00

BID 72909 SECTRACK 1031898 MS MS15-024 Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize memory for rendering of malformed PNG images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Malformed PNG Parsing Information Disclosure Vulnerability."

CVE-2015-0081

2015-03-11T06:59:10.750-04:00

2019-05-14T14:51:25.300-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:21:34.620-04:00

BID 72886 SECTRACK 1031890 MS MS15-020 Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "WTS Remote Code Execution Vulnerability."

CVE-2015-0082

2017-05-11T10:29:44.200-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0083

2017-05-11T10:29:44.233-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/o:microsoft:windows_7:-:sp1 cpe:/o:microsoft:windows_8:- cpe:/o:microsoft:windows_8.1:- cpe:/o:microsoft:windows_rt:- cpe:/o:microsoft:windows_rt_8.1:- cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~itanium~ cpe:/o:microsoft:windows_server_2008:r2:sp1:~~~~x64~ cpe:/o:microsoft:windows_server_2012:- cpe:/o:microsoft:windows_server_2012:r2

CVE-2015-0084

2015-03-11T06:59:11.657-04:00

2019-05-14T15:23:08.660-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T14:11:15.187-04:00

BID 72913 SECTRACK 1031893 MS MS15-028 The Task Scheduler in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to bypass intended restrictions on launching executable files via a crafted task, aka "Task Scheduler Security Feature Bypass Vulnerability."

cpe:/a:microsoft:excel:2007:sp3 cpe:/a:microsoft:excel:2010:sp2:~~~~x86~ cpe:/a:microsoft:excel:2010:sp2:~~~x86~~ cpe:/a:microsoft:excel_viewer cpe:/a:microsoft:office:2010:sp2:~~~~x64~ cpe:/a:microsoft:office:2010:sp2:~~~~x86~ cpe:/a:microsoft:office:2013::~~gold~~~ cpe:/a:microsoft:office:2013::~~rt_gold~~~ cpe:/a:microsoft:office:2013:sp1 cpe:/a:microsoft:office_compatibility_pack::sp3 cpe:/a:microsoft:office_web_apps_server:2010:sp2 cpe:/a:microsoft:office_web_apps_server:2013::~~gold~~~ cpe:/a:microsoft:office_web_apps_server:2013:sp1 cpe:/a:microsoft:powerpoint:2007:sp3 cpe:/a:microsoft:powerpoint:2010:sp2 cpe:/a:microsoft:sharepoint_foundation:2010:sp2 cpe:/a:microsoft:sharepoint_foundation:2013:-:~-~gold~~~ cpe:/a:microsoft:sharepoint_foundation:2013:sp1 cpe:/a:microsoft:sharepoint_server:2007:sp3 cpe:/a:microsoft:sharepoint_server:2010:sp2 cpe:/a:microsoft:sharepoint_server:2013:-:~-~gold~~~ cpe:/a:microsoft:sharepoint_server:2013:sp1 cpe:/a:microsoft:sharepoint_services:3.0:sp3 cpe:/a:microsoft:web_applications:2010:sp2 cpe:/a:microsoft:word:2007:sp3 cpe:/a:microsoft:word:2010:sp2 cpe:/a:microsoft:word:2013::~~gold~~~ cpe:/a:microsoft:word:2013::~~rt_gold~~~ cpe:/a:microsoft:word:2013:sp1

CVE-2015-0085

2015-03-11T06:59:12.533-04:00

2018-10-12T18:08:22.460-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1031896 MS MS15-022 Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 Gold and SP1, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, Office Web Apps Server 2010 SP2, Web Apps Server 2013 Gold and SP1, SharePoint Server 2007 SP3, Windows SharePoint Services 3.0 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."

cpe:/a:microsoft:office:2010:sp2:~~~~x64~ cpe:/a:microsoft:office:2010:sp2:~~~~x86~ cpe:/a:microsoft:office_compatibility_pack::sp3 cpe:/a:microsoft:office_web_apps_server:2013::~~gold~~~ cpe:/a:microsoft:office_web_apps_server:2013:sp1 cpe:/a:microsoft:sharepoint_server:2010:sp2 cpe:/a:microsoft:sharepoint_server:2013:-:~-~gold~~~ cpe:/a:microsoft:sharepoint_server:2013:sp1 cpe:/a:microsoft:web_applications:2010:sp2 cpe:/a:microsoft:word:2007:sp3 cpe:/a:microsoft:word:2010:sp2 cpe:/a:microsoft:word:2013::~~rt_gold~~~ cpe:/a:microsoft:word:2013:sp1 cpe:/a:microsoft:word_viewer

CVE-2015-0086

2015-03-11T06:59:13.347-04:00

2018-10-12T18:08:22.710-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1031896 MS MS15-022 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, and Web Apps Server 2013 Gold and SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."

CVE-2015-0087

2015-03-11T06:59:14.253-04:00

2019-05-14T15:25:36.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T14:12:19.830-04:00

BID 72893 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to obtain sensitive information from kernel memory, and possibly bypass the KASLR protection mechanism, via a crafted font, aka "Adobe Font Driver Information Disclosure Vulnerability," a different vulnerability than CVE-2015-0089.

CVE-2015-0088

2015-03-11T06:59:15.050-04:00

2019-05-14T15:06:56.293-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:13:58.363-04:00

BID 72898 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0090, CVE-2015-0091, CVE-2015-0092, and CVE-2015-0093.

CVE-2015-0089

2015-03-11T06:59:15.863-04:00

2019-05-14T15:10:16.457-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T14:14:57.723-04:00

BID 72896 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to obtain sensitive information from kernel memory, and possibly bypass the KASLR protection mechanism, via a crafted font, aka "Adobe Font Driver Information Disclosure Vulnerability," a different vulnerability than CVE-2015-0087.

CVE-2015-0090

2015-03-11T06:59:16.723-04:00

2019-05-14T15:07:22.170-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:15:42.770-04:00

BID 72904 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0091, CVE-2015-0092, and CVE-2015-0093.

CVE-2015-0091

2015-03-11T06:59:17.693-04:00

2019-05-14T15:08:44.467-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:16:26.380-04:00

BID 72905 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0092, and CVE-2015-0093.

CVE-2015-0092

2015-03-11T06:59:18.927-04:00

2019-05-14T15:09:03.407-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T14:17:08.367-04:00

BID 72906 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0091, and CVE-2015-0093.

CVE-2015-0093

2015-03-11T06:59:20.037-04:00

2019-05-14T15:06:18.497-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:25:47.627-04:00

BID 72907 SECTRACK 1031889 MS MS15-021 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0088, CVE-2015-0090, CVE-2015-0091, and CVE-2015-0092.

CVE-2015-0094

2015-03-11T06:59:20.883-04:00

2019-05-14T15:26:37.243-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-05-14T13:56:42.140-04:00

SECTRACK 1031897 MS MS15-023 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly restrict the availability of address information during a function call, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability."

CVE-2015-0095

2015-03-11T06:59:21.790-04:00

2019-05-14T15:53:32.237-04:00

5.6

LOCAL

LOW

NONE

PARTIAL

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:23:38.013-04:00

BID 72936 SECTRACK 1031897 MS MS15-023 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service (NULL pointer dereference and blue screen), or obtain sensitive information from kernel memory and possibly bypass the ASLR protection mechanism, via a crafted application, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability."

CVE-2015-0096

2015-03-11T06:59:22.760-04:00

2019-05-14T15:47:14.040-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2019-05-14T13:27:47.410-04:00

BID 72894 SECTRACK 1031890 MS MS15-020 Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, leading to DLL loading during Windows Explorer access to the icon of a crafted shortcut, aka "DLL Planting Remote Code Execution Vulnerability."

cpe:/a:microsoft:excel:2007:sp3 cpe:/a:microsoft:excel:2010:sp2:~~~~x86~ cpe:/a:microsoft:excel:2010:sp2:~~~x86~~ cpe:/a:microsoft:powerpoint:2007:sp3 cpe:/a:microsoft:powerpoint:2010:sp2 cpe:/a:microsoft:word:2007:sp3 cpe:/a:microsoft:word:2010:sp2

CVE-2015-0097

2015-03-11T06:59:23.540-04:00

2018-10-12T18:08:26.150-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1031896 MS MS15-022 EXPLOIT-DB 37657 Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability."

cpe:/o:microsoft:windows_7::sp1:x64 cpe:/o:microsoft:windows_7::sp1:x86 cpe:/o:microsoft:windows_server_2008:r2:sp1

CVE-2015-0098

2015-04-14T16:59:00.077-04:00

2018-10-12T18:08:26.477-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1032112 MS MS15-037 Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."

cpe:/a:microsoft:internet_explorer:10

CVE-2015-0099

2015-03-11T06:59:24.543-04:00

2018-10-12T18:08:26.743-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72925 SECTRACK 1031888 MS MS15-018 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

cpe:/a:microsoft:internet_explorer:8

CVE-2015-0100

2015-03-11T06:59:25.403-04:00

2018-10-12T18:08:27.070-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BID 72926 SECTRACK 1031888 MS MS15-018 Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

cpe:/a:ibm:business_process_manager:7.5::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5::~~express~~~ cpe:/a:ibm:business_process_manager:7.5::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5::~~express~~~ cpe:/a:ibm:business_process_manager:8.5::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.5::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.5::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.5::~~standard~~~

CVE-2015-0101

2017-08-28T11:29:00.907-04:00

2017-09-08T10:13:58.773-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-09-08T08:46:01.827-04:00

BID 72920 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21693134 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5.

cpe:/a:ibm:business_process_manager:8.0.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~standard~~~

CVE-2015-0103

2015-03-23T20:59:00.077-04:00

2015-03-24T10:46:36.277-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-24T08:46:29.353-04:00

AIXAPAR JR50457 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21693270 Multiple cross-site scripting (XSS) vulnerabilities in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified data fields.

cpe:/a:ibm:change_and_configuration_management_database:7.1 cpe:/a:ibm:change_and_configuration_management_database:7.2 cpe:/a:ibm:maximo_asset_management:7.1 cpe:/a:ibm:maximo_asset_management:7.1.1 cpe:/a:ibm:maximo_asset_management:7.1.1.1 cpe:/a:ibm:maximo_asset_management:7.1.1.2 cpe:/a:ibm:maximo_asset_management:7.1.1.5 cpe:/a:ibm:maximo_asset_management:7.1.1.6 cpe:/a:ibm:maximo_asset_management:7.1.1.7 cpe:/a:ibm:maximo_asset_management:7.1.1.8 cpe:/a:ibm:maximo_asset_management_essentials:7.1 cpe:/a:ibm:maximo_for_government:7.1 cpe:/a:ibm:maximo_for_life_sciences:7.1 cpe:/a:ibm:maximo_for_nuclear_power:7.1 cpe:/a:ibm:maximo_for_oil_and_gas:7.1 cpe:/a:ibm:maximo_for_transportation:7.1 cpe:/a:ibm:maximo_for_utilities:7.1 cpe:/a:ibm:tivoli_asset_management_for_it:7.1 cpe:/a:ibm:tivoli_asset_management_for_it:7.2 cpe:/a:ibm:tivoli_service_request_manager:7.1 cpe:/a:ibm:tivoli_service_request_manager:7.2

CVE-2015-0104

2017-04-24T02:59:00.383-04:00

2017-04-27T15:50:43.077-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2017-04-27T14:49:28.060-04:00

BID 97999 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21694974 IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to execute arbitrary code via unspecified vectors.

CVE-2015-0105

2015-03-23T20:59:01.233-04:00

2015-03-24T10:54:44.173-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-24T10:52:19.583-04:00

AIXAPAR JR50162 AIXAPAR JR50607 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21694937 Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

cpe:/a:ibm:business_process_manager:7.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~standard~~~ cpe:/a:ibm:websphere_application_server:7.1::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.1::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.2::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.3::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.4::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.5::~~lombardi~~~

CVE-2015-0106

2015-03-23T20:59:02.407-04:00

2015-03-24T10:53:54.253-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-24T09:13:44.070-04:00

AIXAPAR JR50795 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21694935 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVE-2015-0107

2017-04-24T02:59:00.413-04:00

2017-04-27T15:51:00.373-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-04-27T14:47:18.297-04:00

BID 97998 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21694974 IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to conduct directory traversal attacks via unspecified vectors.

CVE-2015-0108

2015-02-17T21:59:00.047-05:00

2017-09-07T21:29:37.840-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21694974 XF ibm-tsam-cve20150108-xss(99605) Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-0104, CVE-2015-0107, and CVE-2015-0109.

CVE-2015-0109

2015-02-17T21:59:01.423-05:00

2017-09-07T21:29:37.903-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21694974 XF ibm-tsam-cve20150109-xss(99606) Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-0104, CVE-2015-0107, and CVE-2015-0108.

cpe:/a:ibm:business_process_manager:7.5.0.0 cpe:/a:ibm:business_process_manager:7.5.0.1 cpe:/a:ibm:business_process_manager:7.5.1.0 cpe:/a:ibm:business_process_manager:7.5.1.1 cpe:/a:ibm:business_process_manager:7.5.1.2 cpe:/a:ibm:business_process_manager:8.0.0.0 cpe:/a:ibm:business_process_manager:8.0.1.0 cpe:/a:ibm:business_process_manager:8.0.1.1 cpe:/a:ibm:business_process_manager:8.0.1.2 cpe:/a:ibm:business_process_manager:8.0.1.3 cpe:/a:ibm:business_process_manager:8.5.0.0 cpe:/a:ibm:business_process_manager:8.5.0.1 cpe:/a:ibm:business_process_manager:8.5.5.0 cpe:/a:ibm:websphere_application_server:7.2.0.0::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.1::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.2::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.3::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.4::~~lombardi~~~ cpe:/a:ibm:websphere_application_server:7.2.0.5::~~lombardi~~~

CVE-2015-0110

2017-09-15T16:29:00.270-04:00

2017-09-26T14:29:07.217-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-09-26T14:02:19.577-04:00

BID 73274 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21694940 IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.

cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1 cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1.1 cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1.2 cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1.3 cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1.4 cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1.5 cpe:/a:ibm:rational_collaborative_lifecycle_management:3.0.1.6 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.0 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.1 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.2 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.3 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.4 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.5 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.6 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.7 cpe:/a:ibm:rational_collaborative_lifecycle_management:5.0.0 cpe:/a:ibm:rational_collaborative_lifecycle_management:5.0.1 cpe:/a:ibm:rational_collaborative_lifecycle_management:5.0.2 cpe:/a:ibm:rational_doors_next_generation:4.0.0 cpe:/a:ibm:rational_doors_next_generation:4.0.1 cpe:/a:ibm:rational_doors_next_generation:4.0.2 cpe:/a:ibm:rational_doors_next_generation:4.0.3 cpe:/a:ibm:rational_doors_next_generation:4.0.4 cpe:/a:ibm:rational_doors_next_generation:4.0.5 cpe:/a:ibm:rational_doors_next_generation:4.0.6 cpe:/a:ibm:rational_doors_next_generation:4.0.7 cpe:/a:ibm:rational_doors_next_generation:5.0.1 cpe:/a:ibm:rational_doors_next_generation:5.0.2 cpe:/a:ibm:rational_engineering_lifecycle_manager:1.0 cpe:/a:ibm:rational_engineering_lifecycle_manager:1.0.0.1 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.3 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.4 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.5 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.6 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.7 cpe:/a:ibm:rational_engineering_lifecycle_manager:5.0.1 cpe:/a:ibm:rational_engineering_lifecycle_manager:5.0.2 cpe:/a:ibm:rational_quality_manager:2.0 cpe:/a:ibm:rational_quality_manager:2.0.0.1 cpe:/a:ibm:rational_quality_manager:2.0.0.2 cpe:/a:ibm:rational_quality_manager:2.0.1 cpe:/a:ibm:rational_quality_manager:3.0 cpe:/a:ibm:rational_quality_manager:3.0.1 cpe:/a:ibm:rational_quality_manager:3.0.1.1 cpe:/a:ibm:rational_quality_manager:3.0.1.2 cpe:/a:ibm:rational_quality_manager:3.0.1.3 cpe:/a:ibm:rational_quality_manager:3.0.1.4 cpe:/a:ibm:rational_quality_manager:3.0.1.5 cpe:/a:ibm:rational_quality_manager:3.0.1.6 cpe:/a:ibm:rational_quality_manager:4.0 cpe:/a:ibm:rational_quality_manager:4.0.0.1 cpe:/a:ibm:rational_quality_manager:4.0.0.2 cpe:/a:ibm:rational_quality_manager:4.0.1 cpe:/a:ibm:rational_quality_manager:4.0.2 cpe:/a:ibm:rational_quality_manager:4.0.3 cpe:/a:ibm:rational_quality_manager:4.0.4 cpe:/a:ibm:rational_quality_manager:4.0.5 cpe:/a:ibm:rational_quality_manager:4.0.7 cpe:/a:ibm:rational_quality_manager:5.0.0 cpe:/a:ibm:rational_quality_manager:5.0.2 cpe:/a:ibm:rational_requirements_composer:2.0 cpe:/a:ibm:rational_requirements_composer:2.0.0.1 cpe:/a:ibm:rational_requirements_composer:2.0.0.2 cpe:/a:ibm:rational_requirements_composer:2.0.0.3 cpe:/a:ibm:rational_requirements_composer:2.0.0.4 cpe:/a:ibm:rational_requirements_composer:3.0 cpe:/a:ibm:rational_requirements_composer:3.0.1 cpe:/a:ibm:rational_requirements_composer:3.0.1.1 cpe:/a:ibm:rational_requirements_composer:3.0.1.2 cpe:/a:ibm:rational_requirements_composer:3.0.1.3 cpe:/a:ibm:rational_requirements_composer:3.0.1.4 cpe:/a:ibm:rational_requirements_composer:3.0.1.5 cpe:/a:ibm:rational_requirements_composer:3.0.1.6 cpe:/a:ibm:rational_requirements_composer:3.5 cpe:/a:ibm:rational_requirements_composer:4.0 cpe:/a:ibm:rational_requirements_composer:4.0.0 cpe:/a:ibm:rational_requirements_composer:4.0.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.3 cpe:/a:ibm:rational_requirements_composer:4.0.4 cpe:/a:ibm:rational_requirements_composer:4.0.5 cpe:/a:ibm:rational_requirements_composer:4.0.6 cpe:/a:ibm:rational_requirements_composer:4.0.7 cpe:/a:ibm:rational_software_architect_design_manager:3.0.0 cpe:/a:ibm:rational_software_architect_design_manager:3.0.0.1 cpe:/a:ibm:rational_software_architect_design_manager:3.0.1 cpe:/a:ibm:rational_software_architect_design_manager:4.0.0 cpe:/a:ibm:rational_software_architect_design_manager:4.0.1 cpe:/a:ibm:rational_software_architect_design_manager:4.0.2 cpe:/a:ibm:rational_software_architect_design_manager:4.0.3 cpe:/a:ibm:rational_software_architect_design_manager:4.0.4 cpe:/a:ibm:rational_software_architect_design_manager:4.0.5 cpe:/a:ibm:rational_software_architect_design_manager:4.0.6 cpe:/a:ibm:rational_software_architect_design_manager:4.0.7 cpe:/a:ibm:rational_software_architect_design_manager:5.0.1 cpe:/a:ibm:rational_software_architect_design_manager:5.0.2 cpe:/a:ibm:rational_team_concert:2.0 cpe:/a:ibm:rational_team_concert:2.0.0.1 cpe:/a:ibm:rational_team_concert:2.0.0.2 cpe:/a:ibm:rational_team_concert:3.0 cpe:/a:ibm:rational_team_concert:3.0.1 cpe:/a:ibm:rational_team_concert:3.0.1.1 cpe:/a:ibm:rational_team_concert:3.0.1.2 cpe:/a:ibm:rational_team_concert:3.0.1.3 cpe:/a:ibm:rational_team_concert:3.0.1.4 cpe:/a:ibm:rational_team_concert:3.0.1.5 cpe:/a:ibm:rational_team_concert:3.0.1.6 cpe:/a:ibm:rational_team_concert:4.0 cpe:/a:ibm:rational_team_concert:4.0.0.1 cpe:/a:ibm:rational_team_concert:4.0.0.2 cpe:/a:ibm:rational_team_concert:4.0.1 cpe:/a:ibm:rational_team_concert:4.0.2 cpe:/a:ibm:rational_team_concert:4.0.3 cpe:/a:ibm:rational_team_concert:4.0.4 cpe:/a:ibm:rational_team_concert:4.0.5 cpe:/a:ibm:rational_team_concert:4.0.6 cpe:/a:ibm:rational_team_concert:4.0.7 cpe:/a:ibm:rational_team_concert:5.0.0 cpe:/a:ibm:rational_team_concert:5.0.1 cpe:/a:ibm:rational_team_concert:5.0.2 cpe:/a:ibm:rhapsody_design_manager:3.0.0 cpe:/a:ibm:rhapsody_design_manager:3.0.0.1 cpe:/a:ibm:rhapsody_design_manager:3.0.1 cpe:/a:ibm:rhapsody_design_manager:4.0.0 cpe:/a:ibm:rhapsody_design_manager:4.0.1 cpe:/a:ibm:rhapsody_design_manager:4.0.2 cpe:/a:ibm:rhapsody_design_manager:4.0.3 cpe:/a:ibm:rhapsody_design_manager:4.0.4 cpe:/a:ibm:rhapsody_design_manager:4.0.5 cpe:/a:ibm:rhapsody_design_manager:4.0.6 cpe:/a:ibm:rhapsody_design_manager:4.0.7 cpe:/a:ibm:rhapsody_design_manager:5.0 cpe:/a:ibm:rhapsody_design_manager:5.0.2

CVE-2015-0112

2015-06-07T14:59:03.470-04:00

2015-06-25T11:08:06.867-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-25T09:37:36.760-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21957763 Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert (RTC) 2.0 through 2.0.0.2, 3.x before 3.0.1.6 IF6, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Requirements Composer (RRC) 2.0 through 2.0.0.4, 3.x before 3.0.1.6 IF6, and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF5 and 5.x before 5.0.2 IF4; Rational Engineering Lifecycle Manager (RELM) 1.0 through 1.0.0.1, 4.0.3 through 4.0.7, and 5.0 through 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2; and Rational Software Architect Design Manager (RSA DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.0 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.1 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.2 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.3 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.4 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.5 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.6 cpe:/a:ibm:rational_collaborative_lifecycle_management:4.0.7 cpe:/a:ibm:rational_collaborative_lifecycle_management:5.0.0 cpe:/a:ibm:rational_collaborative_lifecycle_management:5.0.1 cpe:/a:ibm:rational_collaborative_lifecycle_management:5.0.2 cpe:/a:ibm:rational_doors_next_generation:4.0.0 cpe:/a:ibm:rational_doors_next_generation:4.0.1 cpe:/a:ibm:rational_doors_next_generation:4.0.2 cpe:/a:ibm:rational_doors_next_generation:4.0.3 cpe:/a:ibm:rational_doors_next_generation:4.0.4 cpe:/a:ibm:rational_doors_next_generation:4.0.5 cpe:/a:ibm:rational_doors_next_generation:4.0.6 cpe:/a:ibm:rational_doors_next_generation:4.0.7 cpe:/a:ibm:rational_doors_next_generation:5.0.1 cpe:/a:ibm:rational_doors_next_generation:5.0.2 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.3 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.4 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.5 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.6 cpe:/a:ibm:rational_engineering_lifecycle_manager:4.0.7 cpe:/a:ibm:rational_engineering_lifecycle_manager:5.0 cpe:/a:ibm:rational_engineering_lifecycle_manager:5.0.1 cpe:/a:ibm:rational_engineering_lifecycle_manager:5.0.2 cpe:/a:ibm:rational_quality_manager:4.0 cpe:/a:ibm:rational_quality_manager:4.0.0.1 cpe:/a:ibm:rational_quality_manager:4.0.0.2 cpe:/a:ibm:rational_quality_manager:4.0.1 cpe:/a:ibm:rational_quality_manager:4.0.2 cpe:/a:ibm:rational_quality_manager:4.0.3 cpe:/a:ibm:rational_quality_manager:4.0.4 cpe:/a:ibm:rational_quality_manager:4.0.5 cpe:/a:ibm:rational_quality_manager:4.0.7 cpe:/a:ibm:rational_quality_manager:5.0.0 cpe:/a:ibm:rational_quality_manager:5.0.1 cpe:/a:ibm:rational_quality_manager:5.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.0 cpe:/a:ibm:rational_requirements_composer:4.0.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.3 cpe:/a:ibm:rational_requirements_composer:4.0.4 cpe:/a:ibm:rational_requirements_composer:4.0.5 cpe:/a:ibm:rational_requirements_composer:4.0.6 cpe:/a:ibm:rational_requirements_composer:4.0.7 cpe:/a:ibm:rational_rhapsody_design_manager:4.0 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.1 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.2 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.3 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.4 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.5 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.6 cpe:/a:ibm:rational_rhapsody_design_manager:4.0.7 cpe:/a:ibm:rational_rhapsody_design_manager:5.0 cpe:/a:ibm:rational_rhapsody_design_manager:5.0.1 cpe:/a:ibm:rational_rhapsody_design_manager:5.0.2 cpe:/a:ibm:rational_software_architect_design_manager:4.0.0 cpe:/a:ibm:rational_software_architect_design_manager:4.0.1 cpe:/a:ibm:rational_software_architect_design_manager:4.0.2 cpe:/a:ibm:rational_software_architect_design_manager:4.0.3 cpe:/a:ibm:rational_software_architect_design_manager:4.0.4 cpe:/a:ibm:rational_software_architect_design_manager:4.0.5 cpe:/a:ibm:rational_software_architect_design_manager:4.0.6 cpe:/a:ibm:rational_software_architect_design_manager:4.0.7 cpe:/a:ibm:rational_software_architect_design_manager:5.0 cpe:/a:ibm:rational_software_architect_design_manager:5.0.1 cpe:/a:ibm:rational_software_architect_design_manager:5.0.2 cpe:/a:ibm:rational_team_concert:4.0 cpe:/a:ibm:rational_team_concert:4.0.0.1 cpe:/a:ibm:rational_team_concert:4.0.0.2 cpe:/a:ibm:rational_team_concert:4.0.1 cpe:/a:ibm:rational_team_concert:4.0.2 cpe:/a:ibm:rational_team_concert:4.0.3 cpe:/a:ibm:rational_team_concert:4.0.4 cpe:/a:ibm:rational_team_concert:4.0.5 cpe:/a:ibm:rational_team_concert:4.0.6 cpe:/a:ibm:rational_team_concert:4.0.7 cpe:/a:ibm:rational_team_concert:5.0.0 cpe:/a:ibm:rational_team_concert:5.0.1 cpe:/a:ibm:rational_team_concert:5.0.2

CVE-2015-0113

2015-04-27T07:59:03.280-04:00

2015-04-27T13:48:46.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-04-27T13:27:13.350-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21882770 The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Engineering Lifecycle Manager 4.0.3 through 4.0.7 and 5.0 through 5.0.2, Rational Rhapsody Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, and Rational Software Architect Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2 allows remote attackers to read JSP source code via a crafted request.

cpe:/a:ibm:i_access_for_windows:5.4 cpe:/a:ibm:i_access_for_windows:6.1 cpe:/a:ibm:i_access_for_windows:7.1

CVE-2015-0114

2017-08-28T11:29:00.937-04:00

2017-09-05T09:32:40.963-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-09-05T07:25:36.330-04:00

BID 72914 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=nas8N1020540 Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.

cpe:/a:ibm:leads:7.1.0 cpe:/a:ibm:leads:7.1.1 cpe:/a:ibm:leads:7.5.0 cpe:/a:ibm:leads:8.1.0 cpe:/a:ibm:leads:8.2.0 cpe:/a:ibm:leads:8.5.0 cpe:/a:ibm:leads:8.6.0 cpe:/a:ibm:leads:9.0.0 cpe:/a:ibm:leads:9.1.0 cpe:/a:ibm:leads:9.1.1

CVE-2015-0115

2015-06-28T18:59:01.643-04:00

2015-06-29T12:26:26.923-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-06-29T10:23:44.560-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21902807 Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to hijack the authentication of customer accounts.

CVE-2015-0116

2015-06-28T18:59:02.567-04:00

2016-05-26T08:24:11.660-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-05-25T15:40:11.643-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21902807 IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict the addition of links, which makes it easier for remote authenticated users to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.

cpe:/a:ibm:domino:8.5.0 cpe:/a:ibm:domino:8.5.1 cpe:/a:ibm:domino:8.5.2 cpe:/a:ibm:domino:8.5.3 cpe:/a:ibm:domino:9.0.0 cpe:/a:ibm:domino:9.0.1

CVE-2015-0117

2015-04-05T20:59:01.207-04:00

2016-08-23T13:58:28.720-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2016-08-23T11:57:40.867-04:00

SECTRACK 1032027 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21700029 The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, aka SPR KLYH9SLRGM.

cpe:/a:ibm:integration_bus:9.0 cpe:/a:ibm:integration_bus:9.0.0.1 cpe:/a:ibm:integration_bus:9.0.0.2 cpe:/a:ibm:integration_bus:9.0.0.3 cpe:/a:ibm:websphere_message_broker:7.0. cpe:/a:ibm:websphere_message_broker:7.0.0.1 cpe:/a:ibm:websphere_message_broker:7.0.0.2 cpe:/a:ibm:websphere_message_broker:7.0.0.3 cpe:/a:ibm:websphere_message_broker:7.0.0.4 cpe:/a:ibm:websphere_message_broker:7.0.0.5 cpe:/a:ibm:websphere_message_broker:8.0 cpe:/a:ibm:websphere_message_broker:8.0.0.1 cpe:/a:ibm:websphere_message_broker:8.0.0.2 cpe:/a:ibm:websphere_message_broker:8.0.0.3 cpe:/a:ibm:websphere_message_broker:8.0.0.4 cpe:/a:ibm:websphere_message_broker:8.0.0.5

CVE-2015-0118

2015-06-28T18:59:03.410-04:00

2015-06-29T12:27:51.200-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-29T11:22:27.200-04:00

AIXAPAR IT05725 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21957998 IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ client JAR files that support only weak TLS ciphers, which might make it easier for remote attackers to obtain sensitive information by sniffing the network during a connection to an Integration Bus node.

cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.0.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.1.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.9.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.9.1 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.10.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.10.1 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.11.0

CVE-2015-0119

2015-04-05T20:59:02.267-04:00

2015-04-06T12:49:43.067-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-04-06T12:36:13.260-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699645 FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port.

cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.0.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.0.1 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.1.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.7.2 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.8.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.8.1 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.9.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.9.1 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.10.0 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.10.1 cpe:/a:ibm:tivoli_storage_manager_fastback:6.1.11.0

CVE-2015-0120

2015-05-25T10:59:07.810-04:00

2015-05-26T14:00:13.533-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-05-26T11:58:55.637-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21700549 Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 has unspecified impact and remote attack vectors.

cpe:/a:ibm:rational_doors_next_generation:4.0.0 cpe:/a:ibm:rational_doors_next_generation:4.0.1 cpe:/a:ibm:rational_doors_next_generation:4.0.2 cpe:/a:ibm:rational_doors_next_generation:4.0.3 cpe:/a:ibm:rational_doors_next_generation:4.0.4 cpe:/a:ibm:rational_doors_next_generation:4.0.5 cpe:/a:ibm:rational_doors_next_generation:4.0.6 cpe:/a:ibm:rational_doors_next_generation:4.0.7 cpe:/a:ibm:rational_doors_next_generation:5.0 cpe:/a:ibm:rational_doors_next_generation:5.0.1 cpe:/a:ibm:rational_doors_next_generation:5.0.2 cpe:/a:ibm:rational_requirements_composer:3.0 cpe:/a:ibm:rational_requirements_composer:3.0.1 cpe:/a:ibm:rational_requirements_composer:3.0.1.1 cpe:/a:ibm:rational_requirements_composer:3.0.1.2 cpe:/a:ibm:rational_requirements_composer:3.0.1.3 cpe:/a:ibm:rational_requirements_composer:3.0.1.4 cpe:/a:ibm:rational_requirements_composer:3.0.1.5 cpe:/a:ibm:rational_requirements_composer:3.0.1.6 cpe:/a:ibm:rational_requirements_composer:4.0 cpe:/a:ibm:rational_requirements_composer:4.0.0 cpe:/a:ibm:rational_requirements_composer:4.0.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.3 cpe:/a:ibm:rational_requirements_composer:4.0.4 cpe:/a:ibm:rational_requirements_composer:4.0.5 cpe:/a:ibm:rational_requirements_composer:4.0.6 cpe:/a:ibm:rational_requirements_composer:4.0.7

CVE-2015-0121

2015-05-30T15:59:00.083-04:00

2016-12-02T22:02:16.220-05:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov BID 74910 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21903761 IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.

cpe:/a:ibm:rational_team_concert:2.0.0.2 cpe:/a:ibm:rational_team_concert:3.0 cpe:/a:ibm:rational_team_concert:3.0.1 cpe:/a:ibm:rational_team_concert:3.0.1.1 cpe:/a:ibm:rational_team_concert:3.0.1.2 cpe:/a:ibm:rational_team_concert:3.0.1.3 cpe:/a:ibm:rational_team_concert:3.0.1.4 cpe:/a:ibm:rational_team_concert:3.0.1.5 cpe:/a:ibm:rational_team_concert:3.0.1.6 cpe:/a:ibm:rational_team_concert:4.0 cpe:/a:ibm:rational_team_concert:4.0.0.1 cpe:/a:ibm:rational_team_concert:4.0.0.2 cpe:/a:ibm:rational_team_concert:4.0.1 cpe:/a:ibm:rational_team_concert:4.0.2 cpe:/a:ibm:rational_team_concert:4.0.3 cpe:/a:ibm:rational_team_concert:4.0.4 cpe:/a:ibm:rational_team_concert:4.0.5 cpe:/a:ibm:rational_team_concert:4.0.6 cpe:/a:ibm:rational_team_concert:4.0.7 cpe:/a:ibm:rational_team_concert:5.0.0 cpe:/a:ibm:rational_team_concert:5.0.1

CVE-2015-0122

2015-03-12T21:59:22.897-04:00

2016-12-02T22:02:17.313-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 73093 SECTRACK 1031884 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21698253 Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123.

CVE-2015-0123

2015-03-12T21:59:23.850-04:00

2016-12-02T22:02:18.470-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 73101 SECTRACK 1031884 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21698253 Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122.

cpe:/a:ibm:rational_quality_manager:2.0 cpe:/a:ibm:rational_quality_manager:2.0.0.1 cpe:/a:ibm:rational_quality_manager:2.0.0.2 cpe:/a:ibm:rational_quality_manager:2.0.1 cpe:/a:ibm:rational_quality_manager:2.0.1.1 cpe:/a:ibm:rational_quality_manager:3.0 cpe:/a:ibm:rational_quality_manager:3.0.1 cpe:/a:ibm:rational_quality_manager:3.0.1.1 cpe:/a:ibm:rational_quality_manager:3.0.1.2 cpe:/a:ibm:rational_quality_manager:3.0.1.3 cpe:/a:ibm:rational_quality_manager:3.0.1.4 cpe:/a:ibm:rational_quality_manager:3.0.1.5 cpe:/a:ibm:rational_quality_manager:3.0.1.6 cpe:/a:ibm:rational_quality_manager:4.0 cpe:/a:ibm:rational_quality_manager:4.0.0.1 cpe:/a:ibm:rational_quality_manager:4.0.0.2 cpe:/a:ibm:rational_quality_manager:4.0.1 cpe:/a:ibm:rational_quality_manager:4.0.2 cpe:/a:ibm:rational_quality_manager:4.0.3 cpe:/a:ibm:rational_quality_manager:4.0.4 cpe:/a:ibm:rational_quality_manager:4.0.5 cpe:/a:ibm:rational_quality_manager:4.0.6 cpe:/a:ibm:rational_quality_manager:4.0.7 cpe:/a:ibm:rational_quality_manager:5.0.0 cpe:/a:ibm:rational_quality_manager:5.0.1

CVE-2015-0124

2015-03-18T06:59:02.353-04:00

2016-12-02T22:02:19.627-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 73103 SECTRACK 1031885 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696927 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0128.

CVE-2015-0125

2015-03-18T06:59:03.323-04:00

2016-12-02T22:02:20.720-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 73105 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697297 Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVE-2015-0126

2015-06-28T18:59:04.330-04:00

2015-06-29T12:28:57.510-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-06-29T10:26:50.993-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21902807 IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to bypass intended file-upload restrictions via a modified extension.

CVE-2015-0127

2015-06-28T18:59:05.207-04:00

2015-06-29T12:30:08.430-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-29T10:20:44.000-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21902807 IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks via a crafted web site.

CVE-2015-0128

2015-03-18T06:59:04.183-04:00

2016-11-28T14:15:58.897-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1031885 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697126 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0124.

cpe:/a:ibm:rational_quality_manager:4.0 cpe:/a:ibm:rational_quality_manager:4.0.0.1 cpe:/a:ibm:rational_quality_manager:4.0.0.2 cpe:/a:ibm:rational_quality_manager:4.0.1 cpe:/a:ibm:rational_quality_manager:4.0.2 cpe:/a:ibm:rational_quality_manager:4.0.3 cpe:/a:ibm:rational_quality_manager:4.0.4 cpe:/a:ibm:rational_quality_manager:4.0.5 cpe:/a:ibm:rational_quality_manager:4.0.7 cpe:/a:ibm:rational_quality_manager:5.0.0 cpe:/a:ibm:rational_quality_manager:5.0.1

CVE-2015-0129

2015-03-12T21:59:24.740-04:00

2015-09-11T11:42:06.547-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-11T11:03:11.203-04:00

SECTRACK 1031886 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696856 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVE-2015-0130

2015-07-19T21:59:02.347-04:00

2015-07-20T14:19:00.927-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-07-20T14:08:12.640-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21960407 Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager (RQM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert (RTC) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Requirements Composer (RRC) 4.x through 4.0.7; and Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVE-2015-0131

2015-06-28T18:59:06.097-04:00

2015-06-29T12:36:32.717-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-29T10:29:16.333-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21902807 Cross-site scripting (XSS) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:ibm:rational_doors_next_generation:4.0.0 cpe:/a:ibm:rational_doors_next_generation:4.0.1 cpe:/a:ibm:rational_doors_next_generation:4.0.2 cpe:/a:ibm:rational_doors_next_generation:4.0.3 cpe:/a:ibm:rational_doors_next_generation:4.0.4 cpe:/a:ibm:rational_doors_next_generation:4.0.5 cpe:/a:ibm:rational_doors_next_generation:4.0.6 cpe:/a:ibm:rational_doors_next_generation:4.0.7 cpe:/a:ibm:rational_doors_next_generation:5.0 cpe:/a:ibm:rational_doors_next_generation:5.0.1 cpe:/a:ibm:rational_requirements_composer:2.0 cpe:/a:ibm:rational_requirements_composer:2.0.0.1 cpe:/a:ibm:rational_requirements_composer:2.0.0.2 cpe:/a:ibm:rational_requirements_composer:2.0.0.3 cpe:/a:ibm:rational_requirements_composer:2.0.0.4 cpe:/a:ibm:rational_requirements_composer:3.0 cpe:/a:ibm:rational_requirements_composer:3.0.1 cpe:/a:ibm:rational_requirements_composer:3.0.1.1 cpe:/a:ibm:rational_requirements_composer:3.0.1.2 cpe:/a:ibm:rational_requirements_composer:3.0.1.3 cpe:/a:ibm:rational_requirements_composer:3.0.1.4 cpe:/a:ibm:rational_requirements_composer:3.0.1.5 cpe:/a:ibm:rational_requirements_composer:3.0.1.6 cpe:/a:ibm:rational_requirements_composer:4.0 cpe:/a:ibm:rational_requirements_composer:4.0.0 cpe:/a:ibm:rational_requirements_composer:4.0.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.1 cpe:/a:ibm:rational_requirements_composer:4.0.2 cpe:/a:ibm:rational_requirements_composer:4.0.3 cpe:/a:ibm:rational_requirements_composer:4.0.4 cpe:/a:ibm:rational_requirements_composer:4.0.5 cpe:/a:ibm:rational_requirements_composer:4.0.6 cpe:/a:ibm:rational_requirements_composer:4.0.7

CVE-2015-0132

2015-03-18T06:59:05.247-04:00

2015-03-18T12:13:19.190-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-03-18T10:40:43.700-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21698248 The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

cpe:/a:ibm:websphere_commerce:7.0

CVE-2015-0133

2015-03-12T21:59:25.647-04:00

2015-09-11T11:45:40.367-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-11T11:02:56.437-04:00

SECTRACK 1031881 AIXAPAR JR52499 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696242 IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privileges via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

cpe:/a:ibm:domino:8.5.0 cpe:/a:ibm:domino:8.5.1 cpe:/a:ibm:domino:8.5.2 cpe:/a:ibm:domino:8.5.3 cpe:/a:ibm:domino:9.0.0 cpe:/a:ibm:domino:9.0.1

CVE-2015-0134

2015-04-05T20:59:03.317-04:00

2016-08-24T15:23:19.847-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2016-08-23T12:06:15.157-04:00

SECTRACK 1032027 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21700029 Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:ibm:domino:8.5.0 cpe:/a:ibm:domino:8.5.1 cpe:/a:ibm:domino:8.5.2 cpe:/a:ibm:domino:9.0.0 cpe:/a:ibm:domino:9.0.1

CVE-2015-0135

2015-04-21T12:59:01.233-04:00

2015-09-02T13:20:13.023-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-02T10:49:43.823-04:00

SECTRACK 1032151 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21701647 IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service (integer truncation and application crash) via a crafted GIF image, aka SPR KLYH9T7NT9.

cpe:/a:ibm:powervc:1.2.0.0::~~express~~~ cpe:/a:ibm:powervc:1.2.0.0::~~standard~~~ cpe:/a:ibm:powervc:1.2.0.1::~~express~~~ cpe:/a:ibm:powervc:1.2.0.1::~~standard~~~ cpe:/a:ibm:powervc:1.2.0.2::~~express~~~ cpe:/a:ibm:powervc:1.2.0.2::~~standard~~~ cpe:/a:ibm:powervc:1.2.0.3::~~express~~~ cpe:/a:ibm:powervc:1.2.0.3::~~standard~~~ cpe:/a:ibm:powervc:1.2.1.0:-:~-~express~~~:- cpe:/a:ibm:powervc:1.2.1.0:-:~-~standard~~~:- cpe:/a:ibm:powervc:1.2.1.1:-:~-~express~~~:- cpe:/a:ibm:powervc:1.2.1.1:-:~-~standard~~~:-

CVE-2015-0136

2015-03-23T20:59:03.233-04:00

2015-03-24T10:28:53.453-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-24T10:24:40.130-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=nas8N1020608 powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process.

cpe:/a:ibm:powervc:1.2.0.0::~~standard~~~ cpe:/a:ibm:powervc:1.2.0.1::~~standard~~~ cpe:/a:ibm:powervc:1.2.0.2::~~standard~~~ cpe:/a:ibm:powervc:1.2.0.3::~~standard~~~ cpe:/a:ibm:powervc:1.2.1.0:-:~-~standard~~~:- cpe:/a:ibm:powervc:1.2.1.1:-:~-~standard~~~:-

CVE-2015-0137

2015-03-23T20:59:04.017-04:00

2015-03-24T11:11:58.077-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-24T10:39:52.080-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=nas8N1020611 IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate.

cpe:/a:ibm:tivoli_directory_server:6.0.0.73 cpe:/a:ibm:tivoli_directory_server:6.1.0 cpe:/a:ibm:tivoli_directory_server:6.1.0.0 cpe:/a:ibm:tivoli_directory_server:6.1.0.1 cpe:/a:ibm:tivoli_directory_server:6.1.0.2 cpe:/a:ibm:tivoli_directory_server:6.1.0.3 cpe:/a:ibm:tivoli_directory_server:6.1.0.4 cpe:/a:ibm:tivoli_directory_server:6.1.0.5 cpe:/a:ibm:tivoli_directory_server:6.1.0.6 cpe:/a:ibm:tivoli_directory_server:6.1.0.7 cpe:/a:ibm:tivoli_directory_server:6.1.0.8 cpe:/a:ibm:tivoli_directory_server:6.1.0.9 cpe:/a:ibm:tivoli_directory_server:6.1.0.10 cpe:/a:ibm:tivoli_directory_server:6.1.0.11 cpe:/a:ibm:tivoli_directory_server:6.1.0.12 cpe:/a:ibm:tivoli_directory_server:6.1.0.13 cpe:/a:ibm:tivoli_directory_server:6.1.0.14 cpe:/a:ibm:tivoli_directory_server:6.1.0.15 cpe:/a:ibm:tivoli_directory_server:6.1.0.17 cpe:/a:ibm:tivoli_directory_server:6.1.0.18 cpe:/a:ibm:tivoli_directory_server:6.1.0.19 cpe:/a:ibm:tivoli_directory_server:6.1.0.20 cpe:/a:ibm:tivoli_directory_server:6.1.0.21 cpe:/a:ibm:tivoli_directory_server:6.1.0.22 cpe:/a:ibm:tivoli_directory_server:6.1.0.23 cpe:/a:ibm:tivoli_directory_server:6.1.0.24 cpe:/a:ibm:tivoli_directory_server:6.1.0.25 cpe:/a:ibm:tivoli_directory_server:6.1.0.26 cpe:/a:ibm:tivoli_directory_server:6.1.0.27 cpe:/a:ibm:tivoli_directory_server:6.1.0.28 cpe:/a:ibm:tivoli_directory_server:6.1.0.29 cpe:/a:ibm:tivoli_directory_server:6.1.0.30 cpe:/a:ibm:tivoli_directory_server:6.1.0.31 cpe:/a:ibm:tivoli_directory_server:6.1.0.32 cpe:/a:ibm:tivoli_directory_server:6.1.0.33 cpe:/a:ibm:tivoli_directory_server:6.1.0.34 cpe:/a:ibm:tivoli_directory_server:6.1.0.35 cpe:/a:ibm:tivoli_directory_server:6.1.0.36 cpe:/a:ibm:tivoli_directory_server:6.1.0.37 cpe:/a:ibm:tivoli_directory_server:6.1.0.38 cpe:/a:ibm:tivoli_directory_server:6.1.0.39 cpe:/a:ibm:tivoli_directory_server:6.1.0.40 cpe:/a:ibm:tivoli_directory_server:6.1.0.41 cpe:/a:ibm:tivoli_directory_server:6.1.0.42 cpe:/a:ibm:tivoli_directory_server:6.1.0.43 cpe:/a:ibm:tivoli_directory_server:6.1.0.44 cpe:/a:ibm:tivoli_directory_server:6.1.0.45 cpe:/a:ibm:tivoli_directory_server:6.1.0.46 cpe:/a:ibm:tivoli_directory_server:6.1.0.47 cpe:/a:ibm:tivoli_directory_server:6.1.0.48 cpe:/a:ibm:tivoli_directory_server:6.1.0.49 cpe:/a:ibm:tivoli_directory_server:6.1.0.50 cpe:/a:ibm:tivoli_directory_server:6.1.0.51 cpe:/a:ibm:tivoli_directory_server:6.1.0.52 cpe:/a:ibm:tivoli_directory_server:6.1.0.53 cpe:/a:ibm:tivoli_directory_server:6.1.0.54 cpe:/a:ibm:tivoli_directory_server:6.1.0.55 cpe:/a:ibm:tivoli_directory_server:6.1.0.56 cpe:/a:ibm:tivoli_directory_server:6.1.0.57 cpe:/a:ibm:tivoli_directory_server:6.1.0.58 cpe:/a:ibm:tivoli_directory_server:6.1.0.59 cpe:/a:ibm:tivoli_directory_server:6.1.0.60 cpe:/a:ibm:tivoli_directory_server:6.1.0.61 cpe:/a:ibm:tivoli_directory_server:6.1.0.62 cpe:/a:ibm:tivoli_directory_server:6.1.0.63 cpe:/a:ibm:tivoli_directory_server:6.1.0.64 cpe:/a:ibm:tivoli_directory_server:6.1.0.65 cpe:/a:ibm:tivoli_directory_server:6.1.0.66 cpe:/a:ibm:tivoli_directory_server:6.2.0.0 cpe:/a:ibm:tivoli_directory_server:6.2.0.1 cpe:/a:ibm:tivoli_directory_server:6.2.0.2 cpe:/a:ibm:tivoli_directory_server:6.2.0.3 cpe:/a:ibm:tivoli_directory_server:6.2.0.4 cpe:/a:ibm:tivoli_directory_server:6.2.0.5 cpe:/a:ibm:tivoli_directory_server:6.2.0.6 cpe:/a:ibm:tivoli_directory_server:6.2.0.7 cpe:/a:ibm:tivoli_directory_server:6.2.0.8 cpe:/a:ibm:tivoli_directory_server:6.2.0.10 cpe:/a:ibm:tivoli_directory_server:6.2.0.11 cpe:/a:ibm:tivoli_directory_server:6.2.0.12 cpe:/a:ibm:tivoli_directory_server:6.2.0.13 cpe:/a:ibm:tivoli_directory_server:6.2.0.14 cpe:/a:ibm:tivoli_directory_server:6.2.0.15 cpe:/a:ibm:tivoli_directory_server:6.2.0.19 cpe:/a:ibm:tivoli_directory_server:6.2.0.20 cpe:/a:ibm:tivoli_directory_server:6.2.0.21 cpe:/a:ibm:tivoli_directory_server:6.2.0.22 cpe:/a:ibm:tivoli_directory_server:6.2.0.23 cpe:/a:ibm:tivoli_directory_server:6.2.0.24 cpe:/a:ibm:tivoli_directory_server:6.2.0.25 cpe:/a:ibm:tivoli_directory_server:6.2.0.26 cpe:/a:ibm:tivoli_directory_server:6.2.0.27 cpe:/a:ibm:tivoli_directory_server:6.2.0.29 cpe:/a:ibm:tivoli_directory_server:6.2.0.30 cpe:/a:ibm:tivoli_directory_server:6.2.0.31 cpe:/a:ibm:tivoli_directory_server:6.2.0.32 cpe:/a:ibm:tivoli_directory_server:6.2.0.33 cpe:/a:ibm:tivoli_directory_server:6.2.0.34 cpe:/a:ibm:tivoli_directory_server:6.2.0.35 cpe:/a:ibm:tivoli_directory_server:6.2.0.36 cpe:/a:ibm:tivoli_directory_server:6.2.0.37 cpe:/a:ibm:tivoli_directory_server:6.2.0.38 cpe:/a:ibm:tivoli_directory_server:6.2.0.39 cpe:/a:ibm:tivoli_directory_server:6.2.0.40 cpe:/a:ibm:tivoli_directory_server:6.2.0.41 cpe:/a:ibm:tivoli_directory_server:6.2.0.42 cpe:/a:ibm:tivoli_directory_server:6.3.0.0 cpe:/a:ibm:tivoli_directory_server:6.3.0.1 cpe:/a:ibm:tivoli_directory_server:6.3.0.2 cpe:/a:ibm:tivoli_directory_server:6.3.0.8 cpe:/a:ibm:tivoli_directory_server:6.3.0.9 cpe:/a:ibm:tivoli_directory_server:6.3.0.10 cpe:/a:ibm:tivoli_directory_server:6.3.0.11 cpe:/a:ibm:tivoli_directory_server:6.3.0.12 cpe:/a:ibm:tivoli_directory_server:6.3.0.14 cpe:/a:ibm:tivoli_directory_server:6.3.0.15 cpe:/a:ibm:tivoli_directory_server:6.3.0.17 cpe:/a:ibm:tivoli_directory_server:6.3.0.18 cpe:/a:ibm:tivoli_directory_server:6.3.0.19 cpe:/a:ibm:tivoli_directory_server:6.3.0.21 cpe:/a:ibm:tivoli_directory_server:6.3.0.22 cpe:/a:ibm:tivoli_directory_server:6.3.0.23 cpe:/a:ibm:tivoli_directory_server:6.3.0.24 cpe:/a:ibm:tivoli_directory_server:6.3.0.25 cpe:/a:ibm:tivoli_directory_server:6.3.0.26 cpe:/a:ibm:tivoli_directory_server:6.3.0.27 cpe:/a:ibm:tivoli_directory_server:6.3.0.28 cpe:/a:ibm:tivoli_directory_server:6.3.0.29 cpe:/a:ibm:tivoli_directory_server:6.3.0.30 cpe:/a:ibm:tivoli_directory_server:6.3.0.31 cpe:/a:ibm:tivoli_directory_server:6.3.0.32 cpe:/a:ibm:tivoli_directory_server:6.3.0.33 cpe:/a:ibm:tivoli_directory_server:6.3.0.34 cpe:/a:ibm:tivoli_directory_server:6.3.0.35 cpe:/a:ibm:tivoli_directory_server:6.3.1.0 cpe:/a:ibm:tivoli_directory_server:6.3.1.5 cpe:/a:ibm:tivoli_directory_server:6.3.1.6 cpe:/a:ibm:tivoli_directory_server:6.3.1.7 cpe:/a:ibm:tivoli_directory_server:6.3.1.8 cpe:/a:ibm:tivoli_directory_server:6.3.1.9

CVE-2015-0138

2015-03-24T21:59:17.923-04:00

2017-01-02T21:59:27.957-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SU-2015:1073 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 BID 73326 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21698703 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server (ISDS) 6.3.1 before 6.3.1.9-ISS-ISDS-IF0009 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.

cpe:/a:ibm:websphere_portal:8.0.0.0 cpe:/a:ibm:websphere_portal:8.0.0.1 cpe:/a:ibm:websphere_portal:8.5.0.0

CVE-2015-0139

2015-03-12T21:59:26.583-04:00

2015-09-11T11:50:33.197-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-11T11:02:09.937-04:00

SECTRACK 1031880 AIXAPAR PI33329 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697213 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

cpe:/a:ibm:spss_statistics:22.0

CVE-2015-0140

2015-05-25T10:59:08.667-04:00

2015-05-26T14:01:04.377-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-05-26T12:33:30.920-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697746 An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document.

cpe:/a:ibm:openpages_grc_platform:6.2.0.0 cpe:/a:ibm:openpages_grc_platform:6.2.1.0 cpe:/a:ibm:openpages_grc_platform:6.2.1.1 cpe:/a:ibm:openpages_grc_platform:7.0.0.0 cpe:/a:ibm:openpages_grc_platform:7.1.0.0

CVE-2015-0141

2015-10-03T18:59:01.453-04:00

2015-10-05T15:36:44.823-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-05T11:35:30.053-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21963358 IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary user filters via a JSON request.

CVE-2015-0142

2015-10-03T18:59:02.690-04:00

2015-10-05T16:26:06.747-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2015-10-05T10:57:51.563-04:00

CVE-2015-0143

2015-10-03T18:59:04.017-04:00

2015-10-05T16:27:28.183-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-05T11:04:23.493-04:00

CVE-2015-0144

2015-10-03T18:59:05.237-04:00

2015-10-05T16:35:57.483-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-05T12:24:01.573-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21963358 Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8916.

CVE-2015-0145

2015-10-03T18:59:06.330-04:00

2015-10-05T16:43:59.440-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-10-05T12:25:35.603-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21963358 Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

cpe:/a:ibm:content_collector:3.0.0.0 cpe:/a:ibm:content_collector:3.0.0.1 cpe:/a:ibm:content_collector:3.0.0.2 cpe:/a:ibm:content_collector:3.0.0.3 cpe:/a:ibm:content_collector:3.0.0.4 cpe:/a:ibm:content_collector:3.0.0.5 cpe:/a:ibm:content_collector:4.0.0.0 cpe:/a:ibm:content_collector:4.0.0.1 cpe:/a:ibm:content_collector:4.0.0.2

CVE-2015-0146

2015-03-18T06:59:06.197-04:00

2015-03-18T10:51:03.147-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-18T10:34:22.750-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696594 IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM FileNet P8 systems with IBM Content Search Services, which allows local users to bypass intended document-access restrictions and obtain sensitive information via a crafted search query.

cpe:/a:ibm:api_management:3.0.0.0 cpe:/a:ibm:api_management:3.0.2.0 cpe:/a:ibm:api_management:3.0.2.1 cpe:/a:ibm:api_management:3.0.3.0 cpe:/a:ibm:api_management:3.0.4.0

CVE-2015-0149

2015-03-18T06:59:06.963-04:00

2015-03-18T10:52:07.253-04:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-18T10:28:58.193-04:00

AIXAPAR LI78430 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696693 The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.

CVE-2015-0150

2018-04-12T17:29:00.660-04:00

2018-05-18T10:37:21.983-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-05-15T12:49:07.227-04:00

CONFIRM ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF XF dlink-dir815-cve20150150-sec-bypass(110583) The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors.

CVE-2015-0151

2018-04-12T17:29:00.723-04:00

2018-05-16T10:56:59.090-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2018-05-15T12:52:09.303-04:00

CONFIRM ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF XF dlink-dir815-cve20150151-csrf(110584) Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

CVE-2015-0152

2018-04-12T17:29:00.770-04:00

2018-05-18T09:28:54.970-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-05-15T11:39:12.547-04:00

CONFIRM ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF XF dlink-dir815-cve20150152-info-disc(110585) D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.

CVE-2015-0153

2018-04-12T17:29:00.833-04:00

2018-05-18T09:35:07.997-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-05-15T11:29:59.120-04:00

CONFIRM ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF XF dlink-dir815-cve20150153-info-disc(110586) D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.

CVE-2015-0154

2018-07-16T21:29:00.967-04:00

2018-07-16T21:29:00.983-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.

CVE-2015-0155

2018-07-16T21:29:01.013-04:00

2018-07-16T21:29:01.030-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.

cpe:/a:ibm:business_process_manager:7.5.0.0 cpe:/a:ibm:business_process_manager:7.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.0.1 cpe:/a:ibm:business_process_manager:7.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.0 cpe:/a:ibm:business_process_manager:7.5.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.1 cpe:/a:ibm:business_process_manager:7.5.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.2 cpe:/a:ibm:business_process_manager:7.5.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.0.0 cpe:/a:ibm:business_process_manager:8.0.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.0 cpe:/a:ibm:business_process_manager:8.0.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.1 cpe:/a:ibm:business_process_manager:8.0.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.2 cpe:/a:ibm:business_process_manager:8.0.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.0 cpe:/a:ibm:business_process_manager:8.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.1 cpe:/a:ibm:business_process_manager:8.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.5.0 cpe:/a:ibm:business_process_manager:8.5.5.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.6.0 cpe:/a:ibm:business_process_manager:8.5.6.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.6.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.6.0::~~standard~~~ cpe:/a:ibm:websphere:7.2::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.1::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.2::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.3::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.4::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.5::~~lombardi~~~

CVE-2015-0156

2015-05-25T10:59:09.590-04:00

2015-05-27T08:33:01.617-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-05-26T14:28:22.527-04:00

AIXAPAR IT06812 AIXAPAR JR52420 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697120 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

cpe:/a:ibm:db2:9.7::~~advanced_enterprise~~~ cpe:/a:ibm:db2:9.7::~~advanced_workgroup~~~ cpe:/a:ibm:db2:9.7::~~enterprise~~~ cpe:/a:ibm:db2:9.7::~~express~~~ cpe:/a:ibm:db2:9.7::~~workgroup~~~ cpe:/a:ibm:db2:9.8::~~advanced_enterprise~~~ cpe:/a:ibm:db2:9.8::~~advanced_workgroup~~~ cpe:/a:ibm:db2:9.8::~~enterprise~~~ cpe:/a:ibm:db2:9.8::~~express~~~ cpe:/a:ibm:db2:9.8::~~workgroup~~~ cpe:/a:ibm:db2:10.1::~~advanced_enterprise~~~ cpe:/a:ibm:db2:10.1::~~advanced_workgroup~~~ cpe:/a:ibm:db2:10.1::~~enterprise~~~ cpe:/a:ibm:db2:10.1::~~express~~~ cpe:/a:ibm:db2:10.1::~~workgroup~~~ cpe:/a:ibm:db2:10.5::~~advanced_enterprise~~~ cpe:/a:ibm:db2:10.5::~~advanced_workgroup~~~ cpe:/a:ibm:db2:10.5::~~enterprise~~~ cpe:/a:ibm:db2:10.5::~~express~~~ cpe:/a:ibm:db2:10.5::~~workgroup~~~

CVE-2015-0157

2015-07-19T21:59:03.253-04:00

2017-09-21T21:29:01.327-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov BID 75947 SECTRACK 1032882 AIXAPAR IT07103 AIXAPAR IT07107 AIXAPAR IT07108 AIXAPAR IT07109 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697987 IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by leveraging an unspecified scalar function in a SQL statement.

CVE-2015-0158

2015-03-23T22:01:38.807-04:00

2015-09-28T20:33:26.063-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-25T12:43:38.200-04:00

SECTRACK 1031964 AIXAPAR JR52137 AIXAPAR JR52322 AIXAPAR JR52355 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696378 Cross-site scripting (XSS) vulnerability in the Coach NG framework in IBM Business Process Manager (BPM) 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVE-2015-0159

2015-03-24T21:59:19.080-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3570. Reason: This candidate is a reservation duplicate of CVE-2014-3570. Notes: All CVE users should reference CVE-2014-3570 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:ibm:security_siteprotector_system:3.0 cpe:/a:ibm:security_siteprotector_system:3.0.0.1 cpe:/a:ibm:security_siteprotector_system:3.0.0.2 cpe:/a:ibm:security_siteprotector_system:3.0.0.3 cpe:/a:ibm:security_siteprotector_system:3.0.0.4 cpe:/a:ibm:security_siteprotector_system:3.0.0.5 cpe:/a:ibm:security_siteprotector_system:3.0.0.6 cpe:/a:ibm:security_siteprotector_system:3.1.0.0 cpe:/a:ibm:security_siteprotector_system:3.1.0.1 cpe:/a:ibm:security_siteprotector_system:3.1.0.2 cpe:/a:ibm:security_siteprotector_system:3.1.0.3 cpe:/a:ibm:security_siteprotector_system:3.1.1.0 cpe:/a:ibm:security_siteprotector_system:3.1.1.1

CVE-2015-0160

2015-05-25T10:59:10.730-04:00

2015-05-26T14:01:50.267-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2015-05-26T11:00:38.697-04:00

ALLOWS_ADMIN_ACCESS

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699470 IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors.

CVE-2015-0161

2015-05-25T10:59:11.577-04:00

2015-05-26T14:02:24.830-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-05-26T11:04:12.490-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699470 SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:ibm:security_siteprotector_system:3.0 cpe:/a:ibm:security_siteprotector_system:3.1.0.0 cpe:/a:ibm:security_siteprotector_system:3.1.1.0

CVE-2015-0162

2017-09-20T14:29:00.327-04:00

2017-09-27T13:18:44.247-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2017-09-27T12:28:40.130-04:00

BID 74038 XF ibm-siteprotector-cve20150162-priv-esc(100865) CONFIRM https://www-01.ibm.com/support/docview.wss?uid=swg21700012 IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.

CVE-2015-0163

2018-07-16T21:29:01.060-04:00

2018-07-16T21:29:01.090-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.

CVE-2015-0164

2017-09-15T11:29:00.193-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.

CVE-2015-0165

2017-09-15T11:29:00.227-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.

CVE-2015-0166

2017-09-15T11:29:00.257-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.

cpe:/a:textangular:textangular:1.3.6

CVE-2015-0167

2015-02-20T11:59:04.227-05:00

2017-09-07T21:29:37.967-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov XF textangular-cve20150167-xss(100929) CONFIRM https://github.com/fraywing/textAngular/releases/tag/v1.3.7 Cross-site scripting (XSS) vulnerability in textAngular-sanitize.js in textAngular before 1.3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the editor.

CVE-2015-0168

2015-05-25T10:59:12.357-04:00

2015-05-26T14:02:42.767-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-05-26T11:03:21.677-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699470 Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVE-2015-0169

2015-05-25T10:59:13.340-04:00

2015-05-26T14:03:17.533-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-05-26T11:01:47.100-04:00

CVE-2015-0170

2015-05-25T10:59:14.310-04:00

2015-05-26T14:03:54.093-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-05-26T11:02:32.380-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699470 IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data.

CVE-2015-0171

2015-05-25T10:59:15.247-04:00

2015-05-26T10:59:52.557-04:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2015-05-26T10:59:00.070-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699470 Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.

cpe:/a:ibm:security_siteprotector_system:3.0 cpe:/a:ibm:security_siteprotector_system:3.1.0.0 cpe:/a:ibm:security_siteprotector_system:3.1.1.0

CVE-2015-0172

2018-04-10T11:29:00.940-04:00

2018-05-17T13:34:21.813-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-05-15T10:08:32.100-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699472 IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified commands and obtain sensitive information via unknown vectors. IBM X-Force ID: 100927.

cpe:/a:ibm:websphere_mq_internet_pass_thru:2.1.0.1::~~~websphere_mq~~

CVE-2015-0173

2015-06-28T10:59:00.107-04:00

2017-09-22T21:29:00.467-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1032630 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699547 The HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs, which makes it easier for remote attackers to bypass intended restrictions on MQ message data by predicting an ID value.

cpe:/a:ibm:websphere_application_server:8.5.0.0 cpe:/a:ibm:websphere_application_server:8.5.0.1 cpe:/a:ibm:websphere_application_server:8.5.0.2 cpe:/a:ibm:websphere_application_server:8.5.5.0 cpe:/a:ibm:websphere_application_server:8.5.5.1 cpe:/a:ibm:websphere_application_server:8.5.5.2 cpe:/a:ibm:websphere_application_server:8.5.5.3 cpe:/a:ibm:websphere_application_server:8.5.5.4

CVE-2015-0174

2015-04-27T08:59:00.093-04:00

2015-11-30T14:47:21.767-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-30T12:53:34.963-05:00

SECTRACK 1032190 AIXAPAR PI21072 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697368 The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

CVE-2015-0175

2015-04-27T08:59:01.500-04:00

2015-11-30T14:47:44.887-05:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2015-11-30T12:53:25.257-05:00

SECTRACK 1032190 AIXAPAR PI33008 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697368 IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via unspecified vectors.

cpe:/a:ibm:websphere_mq:7.5.0.4 cpe:/a:ibm:websphere_mq:8.0 cpe:/a:ibm:websphere_mq:8.0.0.1

CVE-2015-0176

2015-04-27T07:59:04.187-04:00

2017-02-08T09:26:17.520-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-02-08T09:22:48.353-05:00

SECTRACK 1032200 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699549 Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response.

cpe:/a:ibm:websphere_portal:8.5.0.0

CVE-2015-0177

2015-03-12T21:59:27.460-04:00

2015-09-11T11:42:57.607-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-11T11:02:00.263-04:00

SECTRACK 1031880 AIXAPAR PI35228 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697213 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF05 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

cpe:/a:ibm:liberty:1.12-20150130-1059::~~~java~~

CVE-2015-0178

2015-03-18T06:59:07.853-04:00

2015-03-18T10:52:38.910-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-18T10:23:09.307-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696864 The Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not properly support WAR applications, which allows remote attackers to obtain sensitive information via unspecified vectors.

cpe:/a:ibm:domino:8.5.0 cpe:/a:ibm:domino:8.5.1 cpe:/a:ibm:domino:8.5.2 cpe:/a:ibm:domino:8.5.3 cpe:/a:ibm:domino:9.0.0 cpe:/a:ibm:domino:9.0.1

CVE-2015-0179

2015-04-05T20:59:04.360-04:00

2017-09-06T21:29:00.290-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SECTRACK 1032027 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21700029 EXPLOIT-DB 42605 Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System privilege via unspecified vectors, aka SPR TCHL9SST8V.

cpe:/a:ibm:infosphere_information_server:8.1 cpe:/a:ibm:infosphere_information_server:8.5 cpe:/a:ibm:infosphere_information_server:8.7 cpe:/a:ibm:infosphere_information_server:9.1 cpe:/a:ibm:infosphere_information_server:9.1.2 cpe:/a:ibm:infosphere_information_server:11.3

CVE-2015-0180

2015-05-25T10:59:16.230-04:00

2015-05-26T13:57:50.927-04:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2015-05-26T13:06:34.340-04:00

AIXAPAR JR51665 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697306 The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors.

cpe:/a:ibm:websphere_mq:7.5 cpe:/a:ibm:websphere_mq:7.5.0.1 cpe:/a:ibm:websphere_mq:7.5.0.2 cpe:/a:ibm:websphere_mq:7.5.0.3 cpe:/a:ibm:websphere_mq:7.5.0.4 cpe:/a:ibm:websphere_mq:8.0 cpe:/a:ibm:websphere_mq:8.0.0.1

CVE-2015-0189

2015-05-20T06:59:02.243-04:00

2017-01-02T21:59:28.003-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov BID 74706 SECTRACK 1032374 AIXAPAR IT05869 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883457 The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated administrators to cause a denial of service (memory overwrite and daemon outage) by triggering multiple transmit-queue records.

CVE-2015-0191

2015-05-30T15:59:01.537-04:00

2015-05-30T15:59:01.567-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0191. Reason: This candidate is a duplicate of CVE-2014-0191. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-0191 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:ibm:java:5.0.0.0 cpe:/a:ibm:java:5.0.11.0 cpe:/a:ibm:java:5.0.11.1 cpe:/a:ibm:java:5.0.11.2 cpe:/a:ibm:java:5.0.12.0 cpe:/a:ibm:java:5.0.12.1 cpe:/a:ibm:java:5.0.12.2 cpe:/a:ibm:java:5.0.12.3 cpe:/a:ibm:java:5.0.12.4 cpe:/a:ibm:java:5.0.12.5 cpe:/a:ibm:java:5.0.13.0 cpe:/a:ibm:java:5.0.14.0 cpe:/a:ibm:java:5.0.15.0 cpe:/a:ibm:java:5.0.16 cpe:/a:ibm:java:5.0.16.0 cpe:/a:ibm:java:5.0.16.1 cpe:/a:ibm:java:5.0.16.2 cpe:/a:ibm:java:5.0.16.3 cpe:/a:ibm:java:6.0.0.0 cpe:/a:ibm:java:6.0.1.0 cpe:/a:ibm:java:6.0.2.0 cpe:/a:ibm:java:6.0.3.0 cpe:/a:ibm:java:6.0.4.0 cpe:/a:ibm:java:6.0.5.0 cpe:/a:ibm:java:6.0.6.0 cpe:/a:ibm:java:6.0.7.0 cpe:/a:ibm:java:6.0.8.0 cpe:/a:ibm:java:6.0.8.1 cpe:/a:ibm:java:6.0.9.0 cpe:/a:ibm:java:6.0.9.1 cpe:/a:ibm:java:6.0.9.2 cpe:/a:ibm:java:6.0.10.0 cpe:/a:ibm:java:6.0.10.1 cpe:/a:ibm:java:6.0.11.0 cpe:/a:ibm:java:6.0.12.0 cpe:/a:ibm:java:6.0.13.0 cpe:/a:ibm:java:6.0.13.1 cpe:/a:ibm:java:6.0.13.2 cpe:/a:ibm:java:6.0.14.0 cpe:/a:ibm:java:6.0.16 cpe:/a:ibm:java:6.0.16.4 cpe:/a:ibm:java:6.1.0.0 cpe:/a:ibm:java:6.1.8 cpe:/a:ibm:java:7.0.0.0 cpe:/a:ibm:java:7.0.1.0 cpe:/a:ibm:java:7.0.2.0 cpe:/a:ibm:java:7.0.3.0 cpe:/a:ibm:java:7.0.4.0 cpe:/a:ibm:java:7.0.4.1 cpe:/a:ibm:java:7.0.4.2 cpe:/a:ibm:java:7.0.5.0 cpe:/a:ibm:java:7.0.9 cpe:/a:ibm:java:7.1.0.0 cpe:/a:ibm:java:7.1.2 cpe:/a:ibm:java:8.0 cpe:/o:redhat:enterprise_linux_desktop:5.0 cpe:/o:redhat:enterprise_linux_desktop:6.0 cpe:/o:redhat:enterprise_linux_desktop:7.0 cpe:/o:redhat:enterprise_linux_server:5.0 cpe:/o:redhat:enterprise_linux_server:6.0 cpe:/o:redhat:enterprise_linux_server:7.0 cpe:/o:redhat:enterprise_linux_server_aus:6.6 cpe:/o:redhat:enterprise_linux_server_eus:6.6 cpe:/o:redhat:enterprise_linux_server_eus:7.1 cpe:/o:redhat:enterprise_linux_server_eus:7.2 cpe:/o:redhat:enterprise_linux_server_eus:7.3 cpe:/o:redhat:enterprise_linux_server_eus:7.4 cpe:/o:redhat:enterprise_linux_server_eus:7.5 cpe:/o:redhat:enterprise_linux_workstation:5.0 cpe:/o:redhat:enterprise_linux_workstation:6.0 cpe:/o:redhat:enterprise_linux_workstation:7.0 cpe:/o:suse:linux_enterprise_server:10:sp4:~~ltss~~~ cpe:/o:suse:linux_enterprise_server:11:sp1:~~ltss~~~ cpe:/o:suse:linux_enterprise_server:11:sp2:~~ltss~~~ cpe:/o:suse:linux_enterprise_server:12 cpe:/o:suse:linux_enterprise_software_development_kit:12

CVE-2015-0192

2015-07-02T17:59:00.063-04:00

2019-06-03T11:51:40.560-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2019-06-03T11:01:34.803-04:00

SUSE SUSE-SU-2015:1073 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 AIXAPAR IV70682 AIXAPAR IV70683 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.

cpe:/a:ibm:business_process_manager:7.5.0.0 cpe:/a:ibm:business_process_manager:7.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.0.1 cpe:/a:ibm:business_process_manager:7.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.0 cpe:/a:ibm:business_process_manager:7.5.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.1 cpe:/a:ibm:business_process_manager:7.5.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:7.5.1.2 cpe:/a:ibm:business_process_manager:7.5.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:7.5.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.0.0 cpe:/a:ibm:business_process_manager:8.0.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.0 cpe:/a:ibm:business_process_manager:8.0.1.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.1 cpe:/a:ibm:business_process_manager:8.0.1.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.2 cpe:/a:ibm:business_process_manager:8.0.1.2::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.2::~~standard~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~express~~~ cpe:/a:ibm:business_process_manager:8.0.1.3::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.0 cpe:/a:ibm:business_process_manager:8.5.0.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.0::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.0.1 cpe:/a:ibm:business_process_manager:8.5.0.1::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.0.1::~~standard~~~ cpe:/a:ibm:business_process_manager:8.5.5.0 cpe:/a:ibm:business_process_manager:8.5.5.0::~~advanced~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~express~~~ cpe:/a:ibm:business_process_manager:8.5.5.0::~~standard~~~ cpe:/a:ibm:websphere:7.2::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.1::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.2::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.3::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.4::~~lombardi~~~ cpe:/a:ibm:websphere:7.2.0.5::~~lombardi~~~

CVE-2015-0193

2015-05-30T15:59:01.583-04:00

2015-06-02T07:47:53.627-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-01T17:00:22.713-04:00

AIXAPAR JR52626 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21697944 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL that triggers an error condition.

cpe:/a:ibm:sterling_b2b_integrator:5.1 cpe:/a:ibm:sterling_b2b_integrator:5.2 cpe:/a:ibm:sterling_file_gateway:2.1 cpe:/a:ibm:sterling_file_gateway:2.2

CVE-2015-0194

2017-08-02T15:29:00.287-04:00

2017-08-14T13:15:57.420-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-08-10T14:19:17.380-04:00

BID 73401 AIXAPAR IT06733 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21699482 XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

cpe:/a:ibm:content_template_catalog:4.1.3 cpe:/a:ibm:content_template_catalog:4.3

CVE-2015-0195

2015-10-03T18:59:07.393-04:00

2015-10-05T15:44:37.093-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-05T12:40:40.017-04:00

CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21958969 Cross-site scripting (XSS) vulnerability in IBM Content Template Catalog 4.x before 4.1.4 for WebSphere Portal 8.0.x and 4.x before 4.3.1 for WebSphere Portal 8.5.x allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

cpe:/a:ibm:websphere_commerce:6.0.0.1 cpe:/a:ibm:websphere_commerce:6.0.0.2 cpe:/a:ibm:websphere_commerce:6.0.0.3 cpe:/a:ibm:websphere_commerce:6.0.0.4 cpe:/a:ibm:websphere_commerce:6.0.0.5 cpe:/a:ibm:websphere_commerce:6.0.0.6 cpe:/a:ibm:websphere_commerce:6.0.0.7 cpe:/a:ibm:websphere_commerce:6.0.0.8 cpe:/a:ibm:websphere_commerce:6.0.0.9 cpe:/a:ibm:websphere_commerce:6.0.0.10 cpe:/a:ibm:websphere_commerce:6.0.0.11 cpe:/a:ibm:websphere_commerce:7.0 cpe:/a:ibm:websphere_commerce:7.0.0.1 cpe:/a:ibm:websphere_commerce:7.0.0.2 cpe:/a:ibm:websphere_commerce:7.0.0.3 cpe:/a:ibm:websphere_commerce:7.0.0.4 cpe:/a:ibm:websphere_commerce:7.0.0.5 cpe:/a:ibm:websphere_commerce:7.0.0.6 cpe:/a:ibm:websphere_commerce:7.0.0.7 cpe:/a:ibm:websphere_commerce:7.0.0.8

CVE-2015-0196

2015-06-29T06:59:00.093-04:00

2015-06-29T12:40:21.520-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-29T11:12:31.457-04:00

AIXAPAR JR51324 AIXAPAR JR52306 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21960181 CRLF injection vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 before 7.0.0.8 Cumulative iFix 2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

cpe:/a:ibm:general_parallel_file_system:3.4 cpe:/a:ibm:general_parallel_file_system:3.5 cpe:/a:ibm:general_parallel_file_system:4.1

CVE-2015-0197

2015-03-23T22:01:39.620-04:00

2016-12-30T21:59:15.747-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 73282 SECTRACK 1032880 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21902662 IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to obtain root privileges for program execution via unspecified vectors.

cpe:/a:ibm:general_parallel_file_system:3.4 cpe:/a:ibm:general_parallel_file_system:3.5 cpe:/a:ibm:general_parallel_file_system:4.1

CVE-2015-0198

2015-03-23T22:01:40.463-04:00

2016-12-30T21:59:15.797-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 73278 SECTRACK 1032880 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21902662 IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors.

cpe:/a:ibm:general_parallel_file_system:3.4 cpe:/a:ibm:general_parallel_file_system:3.5 cpe:/a:ibm:general_parallel_file_system:4.1

CVE-2015-0199

2015-03-23T22:01:41.247-04:00

2016-12-30T21:59:15.843-05:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 73283 SECTRACK 1032880 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=isg3T1022062 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21902662 The mmfslinux kernel module in IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to cause a denial of service (memory corruption) via unspecified character-device ioctl calls.

cpe:/a:ibm:websphere_commerce:6.0.0.0 cpe:/a:ibm:websphere_commerce:6.0.0.1 cpe:/a:ibm:websphere_commerce:6.0.0.2 cpe:/a:ibm:websphere_commerce:6.0.0.3 cpe:/a:ibm:websphere_commerce:6.0.0.4 cpe:/a:ibm:websphere_commerce:6.0.0.5 cpe:/a:ibm:websphere_commerce:6.0.0.6 cpe:/a:ibm:websphere_commerce:6.0.0.7 cpe:/a:ibm:websphere_commerce:6.0.0.8 cpe:/a:ibm:websphere_commerce:6.0.0.9 cpe:/a:ibm:websphere_commerce:6.0.0.10 cpe:/a:ibm:websphere_commerce:6.0.0.11 cpe:/a:ibm:websphere_commerce:7.0 cpe:/a:ibm:websphere_commerce:7.0.0.1 cpe:/a:ibm:websphere_commerce:7.0.0.2 cpe:/a:ibm:websphere_commerce:7.0.0.3 cpe:/a:ibm:websphere_commerce:7.0.0.4 cpe:/a:ibm:websphere_commerce:7.0.0.5 cpe:/a:ibm:websphere_commerce:7.0.0.6 cpe:/a:ibm:websphere_commerce:7.0.0.7 cpe:/a:ibm:websphere_commerce:7.0.0.8

CVE-2015-0200

2015-05-29T11:59:04.000-04:00

2019-09-30T12:19:41.927-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1032392 AIXAPAR JR50683 AIXAPAR JR52306 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21902799 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors.

cpe:/a:pivotal_software:spring_framework:4.1.0 cpe:/a:pivotal_software:spring_framework:4.1.1 cpe:/a:pivotal_software:spring_framework:4.1.2 cpe:/a:pivotal_software:spring_framework:4.1.3 cpe:/a:pivotal_software:spring_framework:4.1.4

CVE-2015-0201

2015-03-10T10:59:04.350-04:00

2015-03-11T15:20:49.977-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-11T14:58:57.357-04:00

CONFIRM https://pivotal.io/security/cve-2015-0201 The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.

cpe:/a:apache:subversion:1.8.0 cpe:/a:apache:subversion:1.8.1 cpe:/a:apache:subversion:1.8.2 cpe:/a:apache:subversion:1.8.3 cpe:/a:apache:subversion:1.8.4 cpe:/a:apache:subversion:1.8.5 cpe:/a:apache:subversion:1.8.6 cpe:/a:apache:subversion:1.8.7 cpe:/a:apache:subversion:1.8.8 cpe:/a:apache:subversion:1.8.9 cpe:/a:apache:subversion:1.8.10 cpe:/a:apache:subversion:1.8.11 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0202

2015-04-08T14:59:00.077-04:00

2018-10-30T12:27:35.843-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0672 CONFIRM http://subversion.apache.org/security/CVE-2015-0202-advisory.txt MANDRIVA MDVSA-2015:192 BID 76446 SECTRACK 1032100 UBUNTU USN-2721-1 GENTOO GLSA-201610-05 The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes.

cpe:/a:apache:qpid:0.30

CVE-2015-0203

2018-02-21T10:29:00.367-05:00

2018-03-18T10:05:39.007-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2018-03-14T09:44:21.073-04:00

BID 72030 REDHAT RHBA-2016:1500 CONFIRM https://issues.apache.org/jira/browse/QPID-6310 MISC https://packetstormsecurity.com/files/129941/Apache-Qpid-0.30-Denial-Of-Service.html The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.

cpe:/a:openssl:openssl:0.9.8zc cpe:/a:openssl:openssl:1.0.0a cpe:/a:openssl:openssl:1.0.0b cpe:/a:openssl:openssl:1.0.0c cpe:/a:openssl:openssl:1.0.0d cpe:/a:openssl:openssl:1.0.0e cpe:/a:openssl:openssl:1.0.0f cpe:/a:openssl:openssl:1.0.0g cpe:/a:openssl:openssl:1.0.0h cpe:/a:openssl:openssl:1.0.0i cpe:/a:openssl:openssl:1.0.0j cpe:/a:openssl:openssl:1.0.0k cpe:/a:openssl:openssl:1.0.0l cpe:/a:openssl:openssl:1.0.0m cpe:/a:openssl:openssl:1.0.0n cpe:/a:openssl:openssl:1.0.0o cpe:/a:openssl:openssl:1.0.1a cpe:/a:openssl:openssl:1.0.1b cpe:/a:openssl:openssl:1.0.1c cpe:/a:openssl:openssl:1.0.1d cpe:/a:openssl:openssl:1.0.1e cpe:/a:openssl:openssl:1.0.1f cpe:/a:openssl:openssl:1.0.1g cpe:/a:openssl:openssl:1.0.1h cpe:/a:openssl:openssl:1.0.1i cpe:/a:openssl:openssl:1.0.1j

CVE-2015-0204

2015-01-08T21:59:10.287-05:00

2018-07-18T21:29:01.700-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 APPLE APPLE-SA-2015-04-08-2 SUSE openSUSE-SU-2015:0130 SUSE SUSE-SU-2015:0578 SUSE SUSE-SU-2015:0946 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 SUSE openSUSE-SU-2016:0640 HP HPSBUX03162 HP HPSBUX03244 HP HPSBGN03299 HP HPSBHF03289 HP HPSBOV03318 HP HPSBUX03334 HP HPSBMU03380 HP HPSBMU03345 HP HPSBMU03409 HP HPSBMU03396 HP HPSBMU03413 HP HPSBMU03397 REDHAT RHSA-2015:0066 REDHAT RHSA-2015:0800 REDHAT RHSA-2015:0849 REDHAT RHSA-2016:1650 CONFIRM http://support.novell.com/security/cve/CVE-2015-0204.html CISCO 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products DEBIAN DSA-3125 MANDRIVA MDVSA-2015:019 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 71936 BID 91787 SECTRACK 1033378 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21960769 CONFIRM https://bto.bluecoat.com/security-advisory/sa88 CONFIRM https://bto.bluecoat.com/security-advisory/sa91 XF openssl-cve20150204-weak-security(99707) MISC https://freakattack.com/ CONFIRM https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0 CONFIRM https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10102 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10108 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://support.apple.com/HT204659 CONFIRM https://support.citrix.com/article/CTX216642 CONFIRM https://www.openssl.org/news/secadv_20150108.txt CONFIRM https://www.openssl.org/news/secadv_20150319.txt The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.

cpe:/a:openssl:openssl:1.0.0a cpe:/a:openssl:openssl:1.0.0b cpe:/a:openssl:openssl:1.0.0c cpe:/a:openssl:openssl:1.0.0d cpe:/a:openssl:openssl:1.0.0e cpe:/a:openssl:openssl:1.0.0f cpe:/a:openssl:openssl:1.0.0g cpe:/a:openssl:openssl:1.0.0h cpe:/a:openssl:openssl:1.0.0i cpe:/a:openssl:openssl:1.0.0j cpe:/a:openssl:openssl:1.0.0k cpe:/a:openssl:openssl:1.0.0l cpe:/a:openssl:openssl:1.0.0m cpe:/a:openssl:openssl:1.0.0n cpe:/a:openssl:openssl:1.0.0o cpe:/a:openssl:openssl:1.0.1a cpe:/a:openssl:openssl:1.0.1b cpe:/a:openssl:openssl:1.0.1c cpe:/a:openssl:openssl:1.0.1d cpe:/a:openssl:openssl:1.0.1e cpe:/a:openssl:openssl:1.0.1f cpe:/a:openssl:openssl:1.0.1g cpe:/a:openssl:openssl:1.0.1h cpe:/a:openssl:openssl:1.0.1i cpe:/a:openssl:openssl:1.0.1j

CVE-2015-0205

2015-01-08T21:59:11.273-05:00

2017-11-14T21:29:05.890-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 FEDORA FEDORA-2015-0512 FEDORA FEDORA-2015-0601 SUSE openSUSE-SU-2015:0130 SUSE SUSE-SU-2015:0578 SUSE SUSE-SU-2015:0946 SUSE openSUSE-SU-2015:1277 HP HPSBHF03289 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03396 HP HPSBMU03413 HP HPSBMU03397 REDHAT RHSA-2015:0066 CISCO 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products DEBIAN DSA-3125 MANDRIVA MDVSA-2015:019 MANDRIVA MDVSA-2015:062 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 71941 BID 91787 SECTRACK 1033378 CONFIRM https://bto.bluecoat.com/security-advisory/sa88 XF openssl-cve20150205-sec-bypass(99708) CONFIRM https://github.com/openssl/openssl/commit/1421e0c584ae9120ca1b88098f13d6d2e90b83a3 CONFIRM https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 CONFIRM https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10102 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10108 CONFIRM https://support.citrix.com/article/CTX216642 CONFIRM https://www.openssl.org/news/secadv_20150108.txt The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.

CVE-2015-0206

2015-01-08T21:59:12.117-05:00

2017-10-19T21:29:04.393-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-0512 FEDORA FEDORA-2015-0601 SUSE openSUSE-SU-2015:0130 SUSE SUSE-SU-2015:0946 SUSE openSUSE-SU-2015:1277 HP HPSBHF03289 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03396 HP HPSBMU03413 HP HPSBMU03397 REDHAT RHSA-2015:0066 CISCO 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products DEBIAN DSA-3125 MANDRIVA MDVSA-2015:019 MANDRIVA MDVSA-2015:062 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 71940 BID 91787 SECTRACK 1033378 CONFIRM https://bto.bluecoat.com/security-advisory/sa88 XF openssl-cve20150206-dos(99704) CONFIRM https://github.com/openssl/openssl/commit/103b171d8fc282ef435f8de9afbf7782e312961f CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10102 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10108 CONFIRM https://www.openssl.org/news/secadv_20150108.txt Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.

cpe:/a:openssl:openssl:1.0.2 cpe:/a:openssl:openssl:1.0.2:beta1 cpe:/a:openssl:openssl:1.0.2:beta2 cpe:/a:openssl:openssl:1.0.2:beta3

CVE-2015-0207

2015-03-19T18:59:00.067-04:00

2018-11-29T09:47:19.910-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-11-28T12:08:45.027-05:00

HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73229 SECTRACK 1031929 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202351 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=819418110b6fff4a7b96f01a5d68f71df3e3b736 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.

cpe:/a:openssl:openssl:1.0.2 cpe:/a:openssl:openssl:1.0.2:beta1 cpe:/a:openssl:openssl:1.0.2:beta2 cpe:/a:openssl:openssl:1.0.2:beta3

CVE-2015-0208

2015-03-19T18:59:01.350-04:00

2018-11-29T09:47:40.160-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2018-11-28T12:10:08.853-05:00

HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73230 SECTRACK 1031929 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202369 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=4b22cce3812052fe64fc3f6d58d8cc884e3cb834 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.

cpe:/a:openssl:openssl:0.9.8ze cpe:/a:openssl:openssl:1.0.0 cpe:/a:openssl:openssl:1.0.0a cpe:/a:openssl:openssl:1.0.0b cpe:/a:openssl:openssl:1.0.0c cpe:/a:openssl:openssl:1.0.0d cpe:/a:openssl:openssl:1.0.0e cpe:/a:openssl:openssl:1.0.0f cpe:/a:openssl:openssl:1.0.0g cpe:/a:openssl:openssl:1.0.0h cpe:/a:openssl:openssl:1.0.0i cpe:/a:openssl:openssl:1.0.0j cpe:/a:openssl:openssl:1.0.0k cpe:/a:openssl:openssl:1.0.0l cpe:/a:openssl:openssl:1.0.0m cpe:/a:openssl:openssl:1.0.0n cpe:/a:openssl:openssl:1.0.0o cpe:/a:openssl:openssl:1.0.0p cpe:/a:openssl:openssl:1.0.0q cpe:/a:openssl:openssl:1.0.1 cpe:/a:openssl:openssl:1.0.1a cpe:/a:openssl:openssl:1.0.1b cpe:/a:openssl:openssl:1.0.1c cpe:/a:openssl:openssl:1.0.1d cpe:/a:openssl:openssl:1.0.1e cpe:/a:openssl:openssl:1.0.1f cpe:/a:openssl:openssl:1.0.1g cpe:/a:openssl:openssl:1.0.1h cpe:/a:openssl:openssl:1.0.1i cpe:/a:openssl:openssl:1.0.1j cpe:/a:openssl:openssl:1.0.1k cpe:/a:openssl:openssl:1.0.1l cpe:/a:openssl:openssl:1.0.2

CVE-2015-0209

2015-03-19T18:59:02.617-04:00

2018-01-04T21:29:58.273-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 APPLE APPLE-SA-2015-06-30-2 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 FEDORA FEDORA-2015-6951 FEDORA FEDORA-2015-6855 SUSE SUSE-SU-2015:0541 SUSE openSUSE-SU-2015:1277 SUSE openSUSE-SU-2016:0640 SUSE openSUSE-SU-2015:0554 HP HPSBGN03306 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03413 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2016:1089 REDHAT RHSA-2016:2957 CONFIRM http://support.apple.com/kb/HT204942 DEBIAN DSA-3197 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73239 SECTRACK 1031929 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1196737 CONFIRM https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1b4a8df38fc9ab3c089ca5765075ee53ec5bd66a CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://support.citrix.com/article/CTX216642 FREEBSD FreeBSD-SA-15:06 CONFIRM https://www.openssl.org/news/secadv_20150319.txt Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.

cpe:/a:w1.fi:wpa_supplicant:2.0-16

CVE-2015-0210

2017-08-28T11:29:00.987-04:00

2017-08-31T14:59:52.497-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-08-31T14:33:30.347-04:00

CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1178263 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1178921 wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.

cpe:/a:moodle:moodle:2.5 cpe:/a:moodle:moodle:2.5.1 cpe:/a:moodle:moodle:2.5.2 cpe:/a:moodle:moodle:2.5.3 cpe:/a:moodle:moodle:2.5.4 cpe:/a:moodle:moodle:2.5.5 cpe:/a:moodle:moodle:2.5.6 cpe:/a:moodle:moodle:2.5.7 cpe:/a:moodle:moodle:2.5.8 cpe:/a:moodle:moodle:2.5.9 cpe:/a:moodle:moodle:2.6 cpe:/a:moodle:moodle:2.6.1 cpe:/a:moodle:moodle:2.6.2 cpe:/a:moodle:moodle:2.6.3 cpe:/a:moodle:moodle:2.6.4 cpe:/a:moodle:moodle:2.6.5 cpe:/a:moodle:moodle:2.6.6 cpe:/a:moodle:moodle:2.7 cpe:/a:moodle:moodle:2.7.1 cpe:/a:moodle:moodle:2.7.2 cpe:/a:moodle:moodle:2.7.3 cpe:/a:moodle:moodle:2.8

CVE-2015-0211

2015-06-01T15:59:00.073-04:00

2015-06-02T07:49:12.063-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-01T23:00:36.723-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47920 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278611 mod/lti/ajax.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 does not consider the moodle/course:manageactivities and mod/lti:addinstance capabilities before proceeding with registered-tool list searches, which allows remote authenticated users to obtain sensitive information via requests to the LTI Ajax service.

CVE-2015-0212

2015-06-01T15:59:01.637-04:00

2015-06-02T12:36:46.727-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-02T10:32:37.883-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48368 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278612 Cross-site scripting (XSS) vulnerability in course/pending.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted course summary.

CVE-2015-0213

2015-06-01T15:59:02.837-04:00

2015-06-02T12:39:36.287-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-06-02T10:33:16.697-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48106 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278613 Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

CVE-2015-0214

2015-06-01T15:59:03.900-04:00

2015-06-02T12:47:59.747-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-02T10:30:56.730-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48329 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278614 message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via a web-services request, as demonstrated by a people-search request.

CVE-2015-0215

2015-06-01T15:59:04.777-04:00

2015-06-02T12:50:02.670-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-02T10:26:49.670-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48017 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278615 calendar/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request.

cpe:/a:moodle:moodle:2.8 cpe:/a:moodle:moodle:2.8.1

CVE-2015-0216

2015-06-01T15:59:05.637-04:00

2015-06-02T12:53:04.480-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-06-02T10:57:52.490-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48034 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278616 access.php in the Lesson module in Moodle 2.8.x before 2.8.2 does not set the RISK_XSS bit for graders, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted essay feedback.

CVE-2015-0217

2015-06-01T15:59:06.650-04:00

2015-06-02T13:35:29.117-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2015-06-02T11:02:45.860-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48546 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278617 filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.

CVE-2015-0218

2015-06-01T15:59:07.480-04:00

2015-06-02T13:36:54.307-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-06-02T11:15:19.180-04:00

CONFIRM http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47964 MLIST [oss-security] 20150119 Moodle security issues are now public CONFIRM https://moodle.org/mod/forum/discuss.php?d=278618 Cross-site request forgery (CSRF) vulnerability in auth/shibboleth/logout.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout.

cpe:/a:djangoproject:django:1.4.17 cpe:/a:djangoproject:django:1.6 cpe:/a:djangoproject:django:1.6.1 cpe:/a:djangoproject:django:1.6.2 cpe:/a:djangoproject:django:1.6.3 cpe:/a:djangoproject:django:1.6.4 cpe:/a:djangoproject:django:1.6.5 cpe:/a:djangoproject:django:1.6.6 cpe:/a:djangoproject:django:1.6.7 cpe:/a:djangoproject:django:1.6.8 cpe:/a:djangoproject:django:1.6.9 cpe:/a:djangoproject:django:1.7 cpe:/a:djangoproject:django:1.7.1 cpe:/a:djangoproject:django:1.7.2

CVE-2015-0219

2015-01-16T11:59:18.657-05:00

2016-12-21T21:59:22.860-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0026.html FEDORA FEDORA-2015-0714 FEDORA FEDORA-2015-0804 FEDORA FEDORA-2015-0790 SUSE openSUSE-SU-2015:0643 SUSE openSUSE-SU-2015:1598 MANDRIVA MDVSA-2015:036 MANDRIVA MDVSA-2015:109 UBUNTU USN-2469-1 CONFIRM https://www.djangoproject.com/weblog/2015/jan/13/security/ Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header.

CVE-2015-0220

2015-01-16T11:59:19.563-05:00

2016-12-21T21:59:22.940-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0026.html FEDORA FEDORA-2015-0714 FEDORA FEDORA-2015-0804 SUSE openSUSE-SU-2015:0643 SUSE openSUSE-SU-2015:1598 UBUNTU USN-2469-1 MANDRIVA MDVSA-2015:036 MANDRIVA MDVSA-2015:109 CONFIRM https://www.djangoproject.com/weblog/2015/jan/13/security/ The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.

CVE-2015-0221

2015-01-16T11:59:20.420-05:00

2016-12-21T21:59:23.000-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0026.html FEDORA FEDORA-2015-0714 FEDORA FEDORA-2015-0804 FEDORA FEDORA-2015-0790 SUSE openSUSE-SU-2015:0643 SUSE openSUSE-SU-2015:1598 UBUNTU USN-2469-1 MANDRIVA MDVSA-2015:036 MANDRIVA MDVSA-2015:109 CONFIRM https://www.djangoproject.com/weblog/2015/jan/13/security/ The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

CVE-2015-0222

2015-01-16T11:59:21.217-05:00

2016-12-21T21:59:23.080-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0026.html FEDORA FEDORA-2015-0714 FEDORA FEDORA-2015-0804 FEDORA FEDORA-2015-0790 SUSE openSUSE-SU-2015:0643 SUSE openSUSE-SU-2015:1598 UBUNTU USN-2469-1 MANDRIVA MDVSA-2015:109 CONFIRM https://www.djangoproject.com/weblog/2015/jan/13/security/ ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.

cpe:/a:apache:qpid:0.30

CVE-2015-0223

2015-02-02T11:59:03.567-05:00

2018-01-04T21:29:58.337-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/130106/Apache-Qpid-0.30-Anonymous-Action-Prevention.html BUGTRAQ 20150126 CVE-2015-0223: anonymous access to qpidd cannot be prevented BID 72319 REDHAT RHBA-2016:1500 Unspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass access restrictions on qpidd via unknown vectors, related to 0-10 connection handling.

cpe:/a:apache:qpid:0.30

CVE-2015-0224

2017-10-30T10:29:00.597-04:00

2018-10-09T15:55:15.873-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2016-120b194a75 MLIST [www-announce] 20150126 CVE-2015-0224: qpidd can be crashed by unauthenticated user MISC http://packetstormsecurity.com/files/130105/Apache-Qpid-0.30-Crash.html REDHAT RHSA-2015:0660 REDHAT RHSA-2015:0661 REDHAT RHSA-2015:0662 REDHAT RHSA-2015:0707 BUGTRAQ 20150126 CVE-2015-0224: qpidd can be crashed by unauthenticated user BID 72317 SECTRACK 1031872 REDHAT RHBA-2016:1500 REDHAT RHSA-2015:0708 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1186302 CONFIRM https://issues.apache.org/jira/browse/QPID-6310 qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0203.

cpe:/a:apache:cassandra:1.2.0 cpe:/a:apache:cassandra:1.2.1 cpe:/a:apache:cassandra:1.2.2 cpe:/a:apache:cassandra:1.2.3 cpe:/a:apache:cassandra:1.2.4 cpe:/a:apache:cassandra:1.2.5 cpe:/a:apache:cassandra:1.2.6 cpe:/a:apache:cassandra:1.2.7 cpe:/a:apache:cassandra:1.2.8 cpe:/a:apache:cassandra:1.2.9 cpe:/a:apache:cassandra:1.2.10 cpe:/a:apache:cassandra:1.2.11 cpe:/a:apache:cassandra:1.2.12 cpe:/a:apache:cassandra:1.2.13 cpe:/a:apache:cassandra:1.2.14 cpe:/a:apache:cassandra:1.2.15 cpe:/a:apache:cassandra:1.2.16 cpe:/a:apache:cassandra:1.2.17 cpe:/a:apache:cassandra:1.2.18 cpe:/a:apache:cassandra:1.2.19 cpe:/a:apache:cassandra:2.0.0 cpe:/a:apache:cassandra:2.0.1 cpe:/a:apache:cassandra:2.0.2 cpe:/a:apache:cassandra:2.0.3 cpe:/a:apache:cassandra:2.0.4 cpe:/a:apache:cassandra:2.0.5 cpe:/a:apache:cassandra:2.0.6 cpe:/a:apache:cassandra:2.0.7 cpe:/a:apache:cassandra:2.0.8 cpe:/a:apache:cassandra:2.0.9 cpe:/a:apache:cassandra:2.0.10 cpe:/a:apache:cassandra:2.0.11 cpe:/a:apache:cassandra:2.0.12 cpe:/a:apache:cassandra:2.0.13 cpe:/a:apache:cassandra:2.1.0 cpe:/a:apache:cassandra:2.1.1 cpe:/a:apache:cassandra:2.1.2 cpe:/a:apache:cassandra:2.1.3

CVE-2015-0225

2015-04-03T10:59:00.070-04:00

2018-10-09T15:55:17.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html REDHAT RHSA-2015:1947 MLIST [user] 20150401 [SECURITY ANNOUNCEMENT] CVE-2015-0225 BUGTRAQ 20150401 [SECURITY ANNOUNCEMENT] CVE-2015-0225 BID 73478 SECTRACK 1034002 The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request.

cpe:/a:apache:wss4j:1.6.16 cpe:/a:apache:wss4j:2.0:beta cpe:/a:apache:wss4j:2.0.0 cpe:/a:apache:wss4j:2.0.0:rc1 cpe:/a:apache:wss4j:2.0.1

CVE-2015-0226

2017-10-30T10:29:00.657-04:00

2019-07-23T19:15:18.880-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2015:0846 REDHAT RHSA-2015:0847 REDHAT RHSA-2015:0848 REDHAT RHSA-2015:0849 REDHAT RHSA-2015:1176 REDHAT RHSA-2015:1177 BID 72553 REDHAT RHSA-2016:1376 CONFIRM https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03900en_us CONFIRM https://ws.apache.org/wss4j/advisories/CVE-2015-0226.txt.asc MISC https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.

cpe:/a:apache:wss4j:1.6.16 cpe:/a:apache:wss4j:2.0.0 cpe:/a:apache:wss4j:2.0.0:rc1 cpe:/a:apache:wss4j:2.0.1

CVE-2015-0227

2015-02-12T11:59:02.627-05:00

2018-10-04T06:29:01.137-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2015:0773 REDHAT RHSA-2015:0846 REDHAT RHSA-2015:0847 REDHAT RHSA-2015:0848 REDHAT RHSA-2015:0849 REDHAT RHSA-2015:1176 REDHAT RHSA-2015:1177 CONFIRM http://ws.apache.org/wss4j/advisories/CVE-2015-0227.txt.asc BID 72557 XF apache-wss4j-sec-bypass(100837) CONFIRM https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03900en_us MISC https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

cpe:/a:apache:http_server:2.4.12 cpe:/o:apple:mac_os_x:10.10.4 cpe:/o:apple:mac_os_x_server:5.0.3 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0228

2015-03-07T21:59:00.073-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0099.html APPLE APPLE-SA-2015-08-13-2 APPLE APPLE-SA-2015-09-16-4 SUSE openSUSE-SU-2015:0418 REDHAT RHSA-2015:1666 CONFIRM http://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x/CHANGES CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html BID 73041 BID 91787 SECTRACK 1032967 UBUNTU USN-2523-1 CONFIRM https://github.com/apache/httpd/commit/643f0fcf3b8ab09a68f0ecd2aa37aafeda3e63ef MLIST [httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html CONFIRM https://support.apple.com/HT205219 CONFIRM https://support.apple.com/kb/HT205031 The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.

CVE-2015-0229

2017-02-04T13:59:00.137-05:00

2017-02-04T13:59:00.150-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0230

2018-07-09T12:29:00.233-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.

cpe:/a:php:php:5.4.0 cpe:/a:php:php:5.4.1 cpe:/a:php:php:5.4.2 cpe:/a:php:php:5.4.3 cpe:/a:php:php:5.4.4 cpe:/a:php:php:5.4.5 cpe:/a:php:php:5.4.6 cpe:/a:php:php:5.4.7 cpe:/a:php:php:5.4.8 cpe:/a:php:php:5.4.9 cpe:/a:php:php:5.4.10 cpe:/a:php:php:5.4.11 cpe:/a:php:php:5.4.12 cpe:/a:php:php:5.4.12:rc1 cpe:/a:php:php:5.4.12:rc2 cpe:/a:php:php:5.4.13 cpe:/a:php:php:5.4.13:rc1 cpe:/a:php:php:5.4.14 cpe:/a:php:php:5.4.14:rc1 cpe:/a:php:php:5.4.15:rc1 cpe:/a:php:php:5.4.16:rc1 cpe:/a:php:php:5.4.17 cpe:/a:php:php:5.4.18 cpe:/a:php:php:5.4.19 cpe:/a:php:php:5.4.20 cpe:/a:php:php:5.4.21 cpe:/a:php:php:5.4.22 cpe:/a:php:php:5.4.23 cpe:/a:php:php:5.4.24 cpe:/a:php:php:5.4.25 cpe:/a:php:php:5.4.26 cpe:/a:php:php:5.4.27 cpe:/a:php:php:5.4.28 cpe:/a:php:php:5.4.29 cpe:/a:php:php:5.4.30 cpe:/a:php:php:5.4.34 cpe:/a:php:php:5.4.35 cpe:/a:php:php:5.4.36 cpe:/a:php:php:5.5.0 cpe:/a:php:php:5.5.0:alpha1 cpe:/a:php:php:5.5.0:alpha2 cpe:/a:php:php:5.5.0:alpha3 cpe:/a:php:php:5.5.0:alpha4 cpe:/a:php:php:5.5.0:alpha5 cpe:/a:php:php:5.5.0:alpha6 cpe:/a:php:php:5.5.0:beta1 cpe:/a:php:php:5.5.0:beta2 cpe:/a:php:php:5.5.0:beta3 cpe:/a:php:php:5.5.0:beta4 cpe:/a:php:php:5.5.0:rc1 cpe:/a:php:php:5.5.0:rc2 cpe:/a:php:php:5.5.1 cpe:/a:php:php:5.5.2 cpe:/a:php:php:5.5.3 cpe:/a:php:php:5.5.4 cpe:/a:php:php:5.5.5 cpe:/a:php:php:5.5.6 cpe:/a:php:php:5.5.7 cpe:/a:php:php:5.5.8 cpe:/a:php:php:5.5.9 cpe:/a:php:php:5.5.10 cpe:/a:php:php:5.5.11 cpe:/a:php:php:5.5.12 cpe:/a:php:php:5.5.13 cpe:/a:php:php:5.5.14 cpe:/a:php:php:5.5.15 cpe:/a:php:php:5.5.16 cpe:/a:php:php:5.5.17 cpe:/a:php:php:5.5.18 cpe:/a:php:php:5.5.19 cpe:/a:php:php:5.5.20 cpe:/a:php:php:5.6.0:alpha1 cpe:/a:php:php:5.6.0:alpha2 cpe:/a:php:php:5.6.0:alpha3 cpe:/a:php:php:5.6.0:alpha4 cpe:/a:php:php:5.6.0:alpha5 cpe:/a:php:php:5.6.0:beta1 cpe:/a:php:php:5.6.0:beta2 cpe:/a:php:php:5.6.0:beta3 cpe:/a:php:php:5.6.0:beta4 cpe:/a:php:php:5.6.1 cpe:/a:php:php:5.6.2 cpe:/a:php:php:5.6.3 cpe:/a:php:php:5.6.4

CVE-2015-0231

2015-01-27T15:03:41.097-05:00

2016-12-30T21:59:15.997-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0040.html APPLE APPLE-SA-2015-09-30-3 SUSE SUSE-SU-2015:0365 SUSE openSUSE-SU-2015:0325 HP SSRT102066 HP HPSBMU03380 HP HPSBMU03409 REDHAT RHSA-2015:1053 REDHAT RHSA-2015:1066 REDHAT RHSA-2015:1135 DEBIAN DSA-3195 MANDRIVA MDVSA-2015:032 MANDRIVA MDVSA-2015:079 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CONFIRM http://www.php.net/ChangeLog-5.php BID 72539 CONFIRM https://bugs.php.net/bug.php?id=68710 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1185397 CONFIRM https://github.com/php/php-src/commit/b585a3aed7880a5fa5c18e2b838fc96f40e075bd GENTOO GLSA-201503-03 GENTOO GLSA-201606-10 CONFIRM https://support.apple.com/HT205267 Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.

CVE-2015-0232

2015-01-27T15:04:11.307-05:00

2018-01-04T21:29:58.697-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0040.html CONFIRM http://git.php.net/?p=php-src.git;a=commit;h=21bc7464f454fec18a9ec024c738f195602fee2a CONFIRM http://git.php.net/?p=php-src.git;a=commit;h=2fc178cf448d8e1b95d1314e47eeef610729e0df CONFIRM http://git.php.net/?p=php-src.git;a=commit;h=55001de6d8c6ed2aada870a76de1e4b4558737bf APPLE APPLE-SA-2015-09-30-3 SUSE SUSE-SU-2015:0365 SUSE openSUSE-SU-2015:0325 HP HPSBMU03380 HP HPSBMU03409 REDHAT RHSA-2015:1053 REDHAT RHSA-2015:1066 REDHAT RHSA-2015:1135 REDHAT RHSA-2015:1218 DEBIAN DSA-3195 MANDRIVA MDVSA-2015:032 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CONFIRM http://www.php.net/ChangeLog-5.php BID 72541 CONFIRM https://bugs.php.net/bug.php?id=68799 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1185472 GENTOO GLSA-201503-03 CONFIRM https://support.apple.com/HT205267 The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.

cpe:/a:fedoraproject:389_administration_server:1.1.37

CVE-2015-0233

2017-08-28T15:29:00.463-04:00

2017-09-08T07:56:40.397-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-09-07T23:10:37.423-04:00

FEDORA FEDORA-2015-1711 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1183151 Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.

cpe:/a:pki-core_project:pki-core:10.2.0

CVE-2015-0234

2017-08-28T21:35:12.420-04:00

2017-09-12T11:23:51.443-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-09-12T10:12:40.473-04:00

CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1183176 MISC https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-0234.html Multiple temporary file creation vulnerabilities in pki-core 10.2.0.

cpe:/a:gnu:glibc:2.0 cpe:/a:gnu:glibc:2.0.1 cpe:/a:gnu:glibc:2.0.2 cpe:/a:gnu:glibc:2.0.3 cpe:/a:gnu:glibc:2.0.4 cpe:/a:gnu:glibc:2.0.5 cpe:/a:gnu:glibc:2.0.6 cpe:/a:gnu:glibc:2.1 cpe:/a:gnu:glibc:2.1.1 cpe:/a:gnu:glibc:2.1.1.6 cpe:/a:gnu:glibc:2.1.2 cpe:/a:gnu:glibc:2.1.3 cpe:/a:gnu:glibc:2.1.9 cpe:/a:gnu:glibc:2.2 cpe:/a:gnu:glibc:2.2.1 cpe:/a:gnu:glibc:2.2.2 cpe:/a:gnu:glibc:2.2.3 cpe:/a:gnu:glibc:2.2.4 cpe:/a:gnu:glibc:2.2.5 cpe:/a:gnu:glibc:2.10.1 cpe:/a:gnu:glibc:2.11 cpe:/a:gnu:glibc:2.11.1 cpe:/a:gnu:glibc:2.11.2 cpe:/a:gnu:glibc:2.11.3 cpe:/a:gnu:glibc:2.12 cpe:/a:gnu:glibc:2.12.1 cpe:/a:gnu:glibc:2.12.2 cpe:/a:gnu:glibc:2.13 cpe:/a:gnu:glibc:2.14 cpe:/a:gnu:glibc:2.14.1 cpe:/a:gnu:glibc:2.15 cpe:/a:gnu:glibc:2.16 cpe:/a:gnu:glibc:2.17 cpe:/a:oracle:communications_applications:13.1 cpe:/a:oracle:oracle_pillar_axiom:6.1 cpe:/a:oracle:oracle_pillar_axiom:6.2 cpe:/a:oracle:oracle_pillar_axiom:6.3

CVE-2015-0235

2015-01-28T14:59:00.063-05:00

2019-06-13T17:29:05.863-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/ CONFIRM http://linux.oracle.com/errata/ELSA-2015-0090.html CONFIRM http://linux.oracle.com/errata/ELSA-2015-0092.html APPLE APPLE-SA-2015-06-30-2 APPLE APPLE-SA-2015-10-21-4 APPLE APPLE-SA-2015-09-30-3 HP HPSBGN03247 HP HPSBHF03289 HP HPSBGN03285 HP HPSBGN03270 HP HPSBMU03330 MISC http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html MISC http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html MISC http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html MISC http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html REDHAT RHSA-2015:0126 FULLDISC 20150128 Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow FULLDISC 20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series BUGTRAQ 20150127 GHOST gethostbyname() heap overflow in glibc (CVE-2015-0235) BUGTRAQ 20150127 Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow SECUNIA 62758 SECUNIA 62812 SECUNIA 62813 SECUNIA 62816 SECUNIA 62865 SECUNIA 62870 SECUNIA 62871 SECUNIA 62879 SECUNIA 62883 CONFIRM http://support.apple.com/kb/HT204942 CISCO 20150128 GNU glibc gethostbyname Function Buffer Overflow Vulnerability DEBIAN DSA-3142 CONFIRM http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf MANDRIVA MDVSA-2015:039 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BUGTRAQ 20150311 OpenSSL v1.0.2 for Linux affected by CVE-2015-0235 BID 72325 BID 91787 SECTRACK 1032909 CONFIRM http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21695695 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21695774 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21695835 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21695860 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696131 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696243 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696526 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696600 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696602 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21696618 CONFIRM https://bto.bluecoat.com/security-advisory/sa90 MISC https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability CONFIRM https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04874668 CONFIRM https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes CONFIRM https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10671 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10100 BUGTRAQ 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series GENTOO GLSA-201503-04 CONFIRM https://security.netapp.com/advisory/ntap-20150127-0001/ CONFIRM https://support.apple.com/HT205267 CONFIRM https://support.apple.com/HT205375 CONFIRM https://www.f-secure.com/en/web/labs_global/fsc-2015-1 MISC https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt CONFIRM https://www.sophos.com/en-us/support/knowledgebase/121879.aspx Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

cpe:/a:redhat:libvirt:1.2.0 cpe:/a:redhat:libvirt:1.2.1 cpe:/a:redhat:libvirt:1.2.2 cpe:/a:redhat:libvirt:1.2.3 cpe:/a:redhat:libvirt:1.2.4 cpe:/a:redhat:libvirt:1.2.5 cpe:/a:redhat:libvirt:1.2.6 cpe:/a:redhat:libvirt:1.2.7 cpe:/a:redhat:libvirt:1.2.8 cpe:/a:redhat:libvirt:1.2.9 cpe:/a:redhat:libvirt:1.2.10 cpe:/a:redhat:libvirt:1.2.11 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:15.04 cpe:/o:canonical:ubuntu_linux:15.10 cpe:/o:mageia:mageia:4.0 cpe:/o:redhat:enterprise_linux_desktop:7.0 cpe:/o:redhat:enterprise_linux_hpc_node:7.0 cpe:/o:redhat:enterprise_linux_server:7.0 cpe:/o:redhat:enterprise_linux_workstation:7.0

CVE-2015-0236

2015-01-29T10:59:00.060-05:00

2018-10-30T12:27:35.843-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2016-08-30T09:38:41.107-04:00

CONFIRM http://advisories.mageia.org/MGASA-2015-0046.html SUSE openSUSE-SU-2015:0225 REDHAT RHSA-2015:0323 CONFIRM http://security.libvirt.org/2015/0001.html MANDRIVA MDVSA-2015:035 MANDRIVA MDVSA-2015:070 UBUNTU USN-2867-1 libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

cpe:/a:redhat:enterprise_virtualization_manager:3.5.0

CVE-2015-0237

2015-05-01T11:59:02.457-04:00

2016-04-11T14:34:03.000-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2016-04-06T12:33:49.673-04:00

REDHAT RHSA-2015:0888 SECTRACK 1032231 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.

cpe:/a:redhat:openshift:2.0

CVE-2015-0238

2017-09-25T21:29:00.380-04:00

2017-10-10T07:57:32.827-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-10-06T16:53:44.847-04:00

CONFIRM https://access.redhat.com/security/cve/CVE-2015-0238 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1184739 selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack.

cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:linux:linux_kernel:1.2.0 cpe:/o:linux:linux_kernel:1.3.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.1.132 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.4:rc1 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.13:pre15 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre5 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.17:pre14 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.21:pre1 cpe:/o:linux:linux_kernel:2.2.21:pre2 cpe:/o:linux:linux_kernel:2.2.21:pre3 cpe:/o:linux:linux_kernel:2.2.21:pre4 cpe:/o:linux:linux_kernel:2.2.21:rc1 cpe:/o:linux:linux_kernel:2.2.21:rc2 cpe:/o:linux:linux_kernel:2.2.21:rc3 cpe:/o:linux:linux_kernel:2.2.21:rc4 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.22:rc1 cpe:/o:linux:linux_kernel:2.2.22:rc2 cpe:/o:linux:linux_kernel:2.2.22:rc3 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.23:rc1 cpe:/o:linux:linux_kernel:2.2.23:rc2 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.24:rc2 cpe:/o:linux:linux_kernel:2.2.24:rc3 cpe:/o:linux:linux_kernel:2.2.24:rc4 cpe:/o:linux:linux_kernel:2.2.24:rc5 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.26 cpe:/o:linux:linux_kernel:2.2.27:pre1 cpe:/o:linux:linux_kernel:2.2.27:pre2 cpe:/o:linux:linux_kernel:2.2.27:rc1 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.1 cpe:/o:linux:linux_kernel:2.3.2 cpe:/o:linux:linux_kernel:2.3.3 cpe:/o:linux:linux_kernel:2.3.4 cpe:/o:linux:linux_kernel:2.3.5 cpe:/o:linux:linux_kernel:2.3.6 cpe:/o:linux:linux_kernel:2.3.7 cpe:/o:linux:linux_kernel:2.3.8 cpe:/o:linux:linux_kernel:2.3.9 cpe:/o:linux:linux_kernel:2.3.10 cpe:/o:linux:linux_kernel:2.3.11 cpe:/o:linux:linux_kernel:2.3.12 cpe:/o:linux:linux_kernel:2.3.13 cpe:/o:linux:linux_kernel:2.3.14 cpe:/o:linux:linux_kernel:2.3.15 cpe:/o:linux:linux_kernel:2.3.16 cpe:/o:linux:linux_kernel:2.3.17 cpe:/o:linux:linux_kernel:2.3.18 cpe:/o:linux:linux_kernel:2.3.19 cpe:/o:linux:linux_kernel:2.3.20 cpe:/o:linux:linux_kernel:2.3.21 cpe:/o:linux:linux_kernel:2.3.22 cpe:/o:linux:linux_kernel:2.3.23 cpe:/o:linux:linux_kernel:2.3.24 cpe:/o:linux:linux_kernel:2.3.25 cpe:/o:linux:linux_kernel:2.3.26 cpe:/o:linux:linux_kernel:2.3.27 cpe:/o:linux:linux_kernel:2.3.28 cpe:/o:linux:linux_kernel:2.3.29 cpe:/o:linux:linux_kernel:2.3.30 cpe:/o:linux:linux_kernel:2.3.31 cpe:/o:linux:linux_kernel:2.3.32 cpe:/o:linux:linux_kernel:2.3.33 cpe:/o:linux:linux_kernel:2.3.34 cpe:/o:linux:linux_kernel:2.3.35 cpe:/o:linux:linux_kernel:2.3.36 cpe:/o:linux:linux_kernel:2.3.37 cpe:/o:linux:linux_kernel:2.3.38 cpe:/o:linux:linux_kernel:2.3.39 cpe:/o:linux:linux_kernel:2.3.40 cpe:/o:linux:linux_kernel:2.3.41 cpe:/o:linux:linux_kernel:2.3.42 cpe:/o:linux:linux_kernel:2.3.43 cpe:/o:linux:linux_kernel:2.3.44 cpe:/o:linux:linux_kernel:2.3.45 cpe:/o:linux:linux_kernel:2.3.46 cpe:/o:linux:linux_kernel:2.3.47 cpe:/o:linux:linux_kernel:2.3.48 cpe:/o:linux:linux_kernel:2.3.49 cpe:/o:linux:linux_kernel:2.3.50 cpe:/o:linux:linux_kernel:2.3.51 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.3.99:pre8 cpe:/o:linux:linux_kernel:2.3.99:pre9 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.3:pre3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.11:pre3 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.18:pre9 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.22:pre10 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.4.28 cpe:/o:linux:linux_kernel:2.4.29 cpe:/o:linux:linux_kernel:2.4.29:rc1 cpe:/o:linux:linux_kernel:2.4.29:rc2 cpe:/o:linux:linux_kernel:2.4.30 cpe:/o:linux:linux_kernel:2.4.30:rc2 cpe:/o:linux:linux_kernel:2.4.30:rc3 cpe:/o:linux:linux_kernel:2.4.31 cpe:/o:linux:linux_kernel:2.4.31:pre1 cpe:/o:linux:linux_kernel:2.4.32 cpe:/o:linux:linux_kernel:2.4.32:pre1 cpe:/o:linux:linux_kernel:2.4.32:pre2 cpe:/o:linux:linux_kernel:2.4.33 cpe:/o:linux:linux_kernel:2.4.33:pre1 cpe:/o:linux:linux_kernel:2.4.33.2 cpe:/o:linux:linux_kernel:2.4.33.3 cpe:/o:linux:linux_kernel:2.4.33.4 cpe:/o:linux:linux_kernel:2.4.33.5 cpe:/o:linux:linux_kernel:2.4.34 cpe:/o:linux:linux_kernel:2.4.34:rc3 cpe:/o:linux:linux_kernel:2.4.34.1 cpe:/o:linux:linux_kernel:2.4.34.2 cpe:/o:linux:linux_kernel:2.4.35 cpe:/o:linux:linux_kernel:2.4.35.2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.1:rc3 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.2:rc1 cpe:/o:linux:linux_kernel:2.6.2:rc2 cpe:/o:linux:linux_kernel:2.6.2:rc3 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.3:rc1 cpe:/o:linux:linux_kernel:2.6.3:rc2 cpe:/o:linux:linux_kernel:2.6.3:rc3 cpe:/o:linux:linux_kernel:2.6.3:rc4 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.4:rc1 cpe:/o:linux:linux_kernel:2.6.4:rc2 cpe:/o:linux:linux_kernel:2.6.4:rc3 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.5:rc1 cpe:/o:linux:linux_kernel:2.6.5:rc2 cpe:/o:linux:linux_kernel:2.6.5:rc3 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.6:rc2 cpe:/o:linux:linux_kernel:2.6.6:rc3 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.7:rc2 cpe:/o:linux:linux_kernel:2.6.7:rc3 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.8:rc4 cpe:/o:linux:linux_kernel:2.6.8.1 cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.9:rc1 cpe:/o:linux:linux_kernel:2.6.9:rc2 cpe:/o:linux:linux_kernel:2.6.9:rc3 cpe:/o:linux:linux_kernel:2.6.9:rc4 cpe:/o:linux:linux_kernel:2.6.10 cpe:/o:linux:linux_kernel:2.6.10:rc1 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:linux:linux_kernel:2.6.10:rc3 cpe:/o:linux:linux_kernel:2.6.11 cpe:/o:linux:linux_kernel:2.6.11:rc1 cpe:/o:linux:linux_kernel:2.6.11:rc2 cpe:/o:linux:linux_kernel:2.6.11:rc3 cpe:/o:linux:linux_kernel:2.6.11:rc4 cpe:/o:linux:linux_kernel:2.6.11:rc5 cpe:/o:linux:linux_kernel:2.6.11.1 cpe:/o:linux:linux_kernel:2.6.11.2 cpe:/o:linux:linux_kernel:2.6.11.3 cpe:/o:linux:linux_kernel:2.6.11.4 cpe:/o:linux:linux_kernel:2.6.11.5 cpe:/o:linux:linux_kernel:2.6.11.6 cpe:/o:linux:linux_kernel:2.6.11.7 cpe:/o:linux:linux_kernel:2.6.11.8 cpe:/o:linux:linux_kernel:2.6.11.9 cpe:/o:linux:linux_kernel:2.6.11.10 cpe:/o:linux:linux_kernel:2.6.11.11 cpe:/o:linux:linux_kernel:2.6.11.12 cpe:/o:linux:linux_kernel:2.6.12 cpe:/o:linux:linux_kernel:2.6.12:rc1 cpe:/o:linux:linux_kernel:2.6.12:rc2 cpe:/o:linux:linux_kernel:2.6.12:rc3 cpe:/o:linux:linux_kernel:2.6.12:rc4 cpe:/o:linux:linux_kernel:2.6.12:rc5 cpe:/o:linux:linux_kernel:2.6.12:rc6 cpe:/o:linux:linux_kernel:2.6.12.1 cpe:/o:linux:linux_kernel:2.6.12.2 cpe:/o:linux:linux_kernel:2.6.12.3 cpe:/o:linux:linux_kernel:2.6.12.4 cpe:/o:linux:linux_kernel:2.6.12.5 cpe:/o:linux:linux_kernel:2.6.12.6 cpe:/o:linux:linux_kernel:2.6.13 cpe:/o:linux:linux_kernel:2.6.13:rc1 cpe:/o:linux:linux_kernel:2.6.13:rc2 cpe:/o:linux:linux_kernel:2.6.13:rc3 cpe:/o:linux:linux_kernel:2.6.13:rc4 cpe:/o:linux:linux_kernel:2.6.13:rc5 cpe:/o:linux:linux_kernel:2.6.13:rc6 cpe:/o:linux:linux_kernel:2.6.13:rc7 cpe:/o:linux:linux_kernel:2.6.13.1 cpe:/o:linux:linux_kernel:2.6.13.2 cpe:/o:linux:linux_kernel:2.6.13.3 cpe:/o:linux:linux_kernel:2.6.13.4 cpe:/o:linux:linux_kernel:2.6.13.5 cpe:/o:linux:linux_kernel:2.6.14 cpe:/o:linux:linux_kernel:2.6.14:rc1 cpe:/o:linux:linux_kernel:2.6.14:rc2 cpe:/o:linux:linux_kernel:2.6.14:rc3 cpe:/o:linux:linux_kernel:2.6.14:rc4 cpe:/o:linux:linux_kernel:2.6.14:rc5 cpe:/o:linux:linux_kernel:2.6.14.1 cpe:/o:linux:linux_kernel:2.6.14.2 cpe:/o:linux:linux_kernel:2.6.14.3 cpe:/o:linux:linux_kernel:2.6.14.4 cpe:/o:linux:linux_kernel:2.6.14.5 cpe:/o:linux:linux_kernel:2.6.14.6 cpe:/o:linux:linux_kernel:2.6.14.7 cpe:/o:linux:linux_kernel:2.6.15 cpe:/o:linux:linux_kernel:2.6.15:rc1 cpe:/o:linux:linux_kernel:2.6.15:rc2 cpe:/o:linux:linux_kernel:2.6.15:rc3 cpe:/o:linux:linux_kernel:2.6.15:rc4 cpe:/o:linux:linux_kernel:2.6.15:rc5 cpe:/o:linux:linux_kernel:2.6.15:rc6 cpe:/o:linux:linux_kernel:2.6.15:rc7 cpe:/o:linux:linux_kernel:2.6.15.1 cpe:/o:linux:linux_kernel:2.6.15.2 cpe:/o:linux:linux_kernel:2.6.15.3 cpe:/o:linux:linux_kernel:2.6.15.4 cpe:/o:linux:linux_kernel:2.6.15.5 cpe:/o:linux:linux_kernel:2.6.15.6 cpe:/o:linux:linux_kernel:2.6.15.7 cpe:/o:linux:linux_kernel:2.6.15.8 cpe:/o:linux:linux_kernel:2.6.15.9 cpe:/o:linux:linux_kernel:2.6.15.10 cpe:/o:linux:linux_kernel:2.6.15.11 cpe:/o:linux:linux_kernel:2.6.16 cpe:/o:linux:linux_kernel:2.6.16:rc1 cpe:/o:linux:linux_kernel:2.6.16:rc2 cpe:/o:linux:linux_kernel:2.6.16:rc3 cpe:/o:linux:linux_kernel:2.6.16:rc4 cpe:/o:linux:linux_kernel:2.6.16:rc5 cpe:/o:linux:linux_kernel:2.6.16:rc6 cpe:/o:linux:linux_kernel:2.6.16:rc7 cpe:/o:linux:linux_kernel:2.6.16.1 cpe:/o:linux:linux_kernel:2.6.16.2 cpe:/o:linux:linux_kernel:2.6.16.3 cpe:/o:linux:linux_kernel:2.6.16.4 cpe:/o:linux:linux_kernel:2.6.16.5 cpe:/o:linux:linux_kernel:2.6.16.6 cpe:/o:linux:linux_kernel:2.6.16.7 cpe:/o:linux:linux_kernel:2.6.16.8 cpe:/o:linux:linux_kernel:2.6.16.9 cpe:/o:linux:linux_kernel:2.6.16.10 cpe:/o:linux:linux_kernel:2.6.16.11 cpe:/o:linux:linux_kernel:2.6.16.12 cpe:/o:linux:linux_kernel:2.6.16.13 cpe:/o:linux:linux_kernel:2.6.16.14 cpe:/o:linux:linux_kernel:2.6.16.15 cpe:/o:linux:linux_kernel:2.6.16.16 cpe:/o:linux:linux_kernel:2.6.16.17 cpe:/o:linux:linux_kernel:2.6.16.18 cpe:/o:linux:linux_kernel:2.6.16.19 cpe:/o:linux:linux_kernel:2.6.16.20 cpe:/o:linux:linux_kernel:2.6.16.21 cpe:/o:linux:linux_kernel:2.6.16.22 cpe:/o:linux:linux_kernel:2.6.16.23 cpe:/o:linux:linux_kernel:2.6.16.24 cpe:/o:linux:linux_kernel:2.6.16.25 cpe:/o:linux:linux_kernel:2.6.16.26 cpe:/o:linux:linux_kernel:2.6.16.27 cpe:/o:linux:linux_kernel:2.6.16.28 cpe:/o:linux:linux_kernel:2.6.16.29 cpe:/o:linux:linux_kernel:2.6.16.30 cpe:/o:linux:linux_kernel:2.6.16.31 cpe:/o:linux:linux_kernel:2.6.16.32 cpe:/o:linux:linux_kernel:2.6.16.33 cpe:/o:linux:linux_kernel:2.6.16.34 cpe:/o:linux:linux_kernel:2.6.16.35 cpe:/o:linux:linux_kernel:2.6.16.36 cpe:/o:linux:linux_kernel:2.6.16.37 cpe:/o:linux:linux_kernel:2.6.16.38 cpe:/o:linux:linux_kernel:2.6.16.39 cpe:/o:linux:linux_kernel:2.6.16.40 cpe:/o:linux:linux_kernel:2.6.16.41 cpe:/o:linux:linux_kernel:2.6.16.42 cpe:/o:linux:linux_kernel:2.6.16.43 cpe:/o:linux:linux_kernel:2.6.16.44 cpe:/o:linux:linux_kernel:2.6.16.45 cpe:/o:linux:linux_kernel:2.6.16.46 cpe:/o:linux:linux_kernel:2.6.16.47 cpe:/o:linux:linux_kernel:2.6.16.48 cpe:/o:linux:linux_kernel:2.6.16.49 cpe:/o:linux:linux_kernel:2.6.16.50 cpe:/o:linux:linux_kernel:2.6.16.51 cpe:/o:linux:linux_kernel:2.6.16.52 cpe:/o:linux:linux_kernel:2.6.16.53 cpe:/o:linux:linux_kernel:2.6.16.54 cpe:/o:linux:linux_kernel:2.6.16.55 cpe:/o:linux:linux_kernel:2.6.16.56 cpe:/o:linux:linux_kernel:2.6.16.57 cpe:/o:linux:linux_kernel:2.6.16.58 cpe:/o:linux:linux_kernel:2.6.16.59 cpe:/o:linux:linux_kernel:2.6.16.60 cpe:/o:linux:linux_kernel:2.6.16.61 cpe:/o:linux:linux_kernel:2.6.16.62 cpe:/o:linux:linux_kernel:2.6.17 cpe:/o:linux:linux_kernel:2.6.17:rc1 cpe:/o:linux:linux_kernel:2.6.17:rc2 cpe:/o:linux:linux_kernel:2.6.17:rc3 cpe:/o:linux:linux_kernel:2.6.17:rc4 cpe:/o:linux:linux_kernel:2.6.17:rc5 cpe:/o:linux:linux_kernel:2.6.17:rc6 cpe:/o:linux:linux_kernel:2.6.17.1 cpe:/o:linux:linux_kernel:2.6.17.2 cpe:/o:linux:linux_kernel:2.6.17.3 cpe:/o:linux:linux_kernel:2.6.17.4 cpe:/o:linux:linux_kernel:2.6.17.5 cpe:/o:linux:linux_kernel:2.6.17.6 cpe:/o:linux:linux_kernel:2.6.17.7 cpe:/o:linux:linux_kernel:2.6.17.8 cpe:/o:linux:linux_kernel:2.6.17.9 cpe:/o:linux:linux_kernel:2.6.17.10 cpe:/o:linux:linux_kernel:2.6.17.11 cpe:/o:linux:linux_kernel:2.6.17.12 cpe:/o:linux:linux_kernel:2.6.17.13 cpe:/o:linux:linux_kernel:2.6.17.14 cpe:/o:linux:linux_kernel:2.6.18 cpe:/o:linux:linux_kernel:2.6.18:rc1 cpe:/o:linux:linux_kernel:2.6.18:rc2 cpe:/o:linux:linux_kernel:2.6.18:rc3 cpe:/o:linux:linux_kernel:2.6.18:rc4 cpe:/o:linux:linux_kernel:2.6.18:rc5 cpe:/o:linux:linux_kernel:2.6.18:rc6 cpe:/o:linux:linux_kernel:2.6.18:rc7 cpe:/o:linux:linux_kernel:2.6.18.1 cpe:/o:linux:linux_kernel:2.6.18.2 cpe:/o:linux:linux_kernel:2.6.18.3 cpe:/o:linux:linux_kernel:2.6.18.4 cpe:/o:linux:linux_kernel:2.6.18.5 cpe:/o:linux:linux_kernel:2.6.18.6 cpe:/o:linux:linux_kernel:2.6.18.7 cpe:/o:linux:linux_kernel:2.6.18.8 cpe:/o:linux:linux_kernel:2.6.19 cpe:/o:linux:linux_kernel:2.6.19:rc1 cpe:/o:linux:linux_kernel:2.6.19:rc2 cpe:/o:linux:linux_kernel:2.6.19:rc3 cpe:/o:linux:linux_kernel:2.6.19:rc4 cpe:/o:linux:linux_kernel:2.6.19:rc5 cpe:/o:linux:linux_kernel:2.6.19:rc6 cpe:/o:linux:linux_kernel:2.6.19.1 cpe:/o:linux:linux_kernel:2.6.19.2 cpe:/o:linux:linux_kernel:2.6.19.3 cpe:/o:linux:linux_kernel:2.6.19.4 cpe:/o:linux:linux_kernel:2.6.19.5 cpe:/o:linux:linux_kernel:2.6.19.6 cpe:/o:linux:linux_kernel:2.6.19.7 cpe:/o:linux:linux_kernel:2.6.20 cpe:/o:linux:linux_kernel:2.6.20:rc1 cpe:/o:linux:linux_kernel:2.6.20:rc2 cpe:/o:linux:linux_kernel:2.6.20:rc3 cpe:/o:linux:linux_kernel:2.6.20:rc4 cpe:/o:linux:linux_kernel:2.6.20:rc5 cpe:/o:linux:linux_kernel:2.6.20:rc6 cpe:/o:linux:linux_kernel:2.6.20:rc7 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:linux:linux_kernel:2.6.20.2 cpe:/o:linux:linux_kernel:2.6.20.3 cpe:/o:linux:linux_kernel:2.6.20.4 cpe:/o:linux:linux_kernel:2.6.20.5 cpe:/o:linux:linux_kernel:2.6.20.6 cpe:/o:linux:linux_kernel:2.6.20.7 cpe:/o:linux:linux_kernel:2.6.20.8 cpe:/o:linux:linux_kernel:2.6.20.9 cpe:/o:linux:linux_kernel:2.6.20.10 cpe:/o:linux:linux_kernel:2.6.20.11 cpe:/o:linux:linux_kernel:2.6.20.12 cpe:/o:linux:linux_kernel:2.6.20.13 cpe:/o:linux:linux_kernel:2.6.20.14 cpe:/o:linux:linux_kernel:2.6.20.15 cpe:/o:linux:linux_kernel:2.6.20.16 cpe:/o:linux:linux_kernel:2.6.20.17 cpe:/o:linux:linux_kernel:2.6.20.18 cpe:/o:linux:linux_kernel:2.6.20.19 cpe:/o:linux:linux_kernel:2.6.20.20 cpe:/o:linux:linux_kernel:2.6.20.21 cpe:/o:linux:linux_kernel:2.6.21 cpe:/o:linux:linux_kernel:2.6.21:git1 cpe:/o:linux:linux_kernel:2.6.21:git2 cpe:/o:linux:linux_kernel:2.6.21:git3 cpe:/o:linux:linux_kernel:2.6.21:git4 cpe:/o:linux:linux_kernel:2.6.21:git5 cpe:/o:linux:linux_kernel:2.6.21:git6 cpe:/o:linux:linux_kernel:2.6.21:git7 cpe:/o:linux:linux_kernel:2.6.21:rc1 cpe:/o:linux:linux_kernel:2.6.21:rc2 cpe:/o:linux:linux_kernel:2.6.21:rc3 cpe:/o:linux:linux_kernel:2.6.21:rc4 cpe:/o:linux:linux_kernel:2.6.21:rc5 cpe:/o:linux:linux_kernel:2.6.21:rc6 cpe:/o:linux:linux_kernel:2.6.21:rc7 cpe:/o:linux:linux_kernel:2.6.21.1 cpe:/o:linux:linux_kernel:2.6.21.2 cpe:/o:linux:linux_kernel:2.6.21.3 cpe:/o:linux:linux_kernel:2.6.21.4 cpe:/o:linux:linux_kernel:2.6.21.5 cpe:/o:linux:linux_kernel:2.6.21.6 cpe:/o:linux:linux_kernel:2.6.21.7 cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:2.6.22:rc1 cpe:/o:linux:linux_kernel:2.6.22:rc2 cpe:/o:linux:linux_kernel:2.6.22:rc3 cpe:/o:linux:linux_kernel:2.6.22:rc4 cpe:/o:linux:linux_kernel:2.6.22:rc5 cpe:/o:linux:linux_kernel:2.6.22:rc6 cpe:/o:linux:linux_kernel:2.6.22:rc7 cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6.22.2 cpe:/o:linux:linux_kernel:2.6.22.3 cpe:/o:linux:linux_kernel:2.6.22.4 cpe:/o:linux:linux_kernel:2.6.22.5 cpe:/o:linux:linux_kernel:2.6.22.6 cpe:/o:linux:linux_kernel:2.6.22.7 cpe:/o:linux:linux_kernel:2.6.22.8 cpe:/o:linux:linux_kernel:2.6.22.9 cpe:/o:linux:linux_kernel:2.6.22.10 cpe:/o:linux:linux_kernel:2.6.22.11 cpe:/o:linux:linux_kernel:2.6.22.12 cpe:/o:linux:linux_kernel:2.6.22.13 cpe:/o:linux:linux_kernel:2.6.22.14 cpe:/o:linux:linux_kernel:2.6.22.15 cpe:/o:linux:linux_kernel:2.6.22.16 cpe:/o:linux:linux_kernel:2.6.22.17 cpe:/o:linux:linux_kernel:2.6.22.18 cpe:/o:linux:linux_kernel:2.6.22.19 cpe:/o:linux:linux_kernel:2.6.22.20 cpe:/o:linux:linux_kernel:2.6.22.21 cpe:/o:linux:linux_kernel:2.6.22.22 cpe:/o:linux:linux_kernel:2.6.23 cpe:/o:linux:linux_kernel:2.6.23:rc1 cpe:/o:linux:linux_kernel:2.6.23:rc2 cpe:/o:linux:linux_kernel:2.6.23:rc3 cpe:/o:linux:linux_kernel:2.6.23:rc4 cpe:/o:linux:linux_kernel:2.6.23:rc5 cpe:/o:linux:linux_kernel:2.6.23:rc6 cpe:/o:linux:linux_kernel:2.6.23:rc7 cpe:/o:linux:linux_kernel:2.6.23:rc8 cpe:/o:linux:linux_kernel:2.6.23:rc9 cpe:/o:linux:linux_kernel:2.6.23.1 cpe:/o:linux:linux_kernel:2.6.23.2 cpe:/o:linux:linux_kernel:2.6.23.3 cpe:/o:linux:linux_kernel:2.6.23.4 cpe:/o:linux:linux_kernel:2.6.23.5 cpe:/o:linux:linux_kernel:2.6.23.6 cpe:/o:linux:linux_kernel:2.6.23.7 cpe:/o:linux:linux_kernel:2.6.23.8 cpe:/o:linux:linux_kernel:2.6.23.9 cpe:/o:linux:linux_kernel:2.6.23.10 cpe:/o:linux:linux_kernel:2.6.23.11 cpe:/o:linux:linux_kernel:2.6.23.12 cpe:/o:linux:linux_kernel:2.6.23.13 cpe:/o:linux:linux_kernel:2.6.23.14 cpe:/o:linux:linux_kernel:2.6.23.15 cpe:/o:linux:linux_kernel:2.6.23.16 cpe:/o:linux:linux_kernel:2.6.23.17 cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.24:rc1 cpe:/o:linux:linux_kernel:2.6.24:rc2 cpe:/o:linux:linux_kernel:2.6.24:rc3 cpe:/o:linux:linux_kernel:2.6.24:rc4 cpe:/o:linux:linux_kernel:2.6.24:rc5 cpe:/o:linux:linux_kernel:2.6.24:rc6 cpe:/o:linux:linux_kernel:2.6.24:rc7 cpe:/o:linux:linux_kernel:2.6.24:rc8 cpe:/o:linux:linux_kernel:2.6.24.1 cpe:/o:linux:linux_kernel:2.6.24.2 cpe:/o:linux:linux_kernel:2.6.24.3 cpe:/o:linux:linux_kernel:2.6.24.4 cpe:/o:linux:linux_kernel:2.6.24.5 cpe:/o:linux:linux_kernel:2.6.24.6 cpe:/o:linux:linux_kernel:2.6.24.7 cpe:/o:linux:linux_kernel:2.6.25 cpe:/o:linux:linux_kernel:2.6.25:rc1 cpe:/o:linux:linux_kernel:2.6.25:rc2 cpe:/o:linux:linux_kernel:2.6.25:rc3 cpe:/o:linux:linux_kernel:2.6.25:rc4 cpe:/o:linux:linux_kernel:2.6.25:rc5 cpe:/o:linux:linux_kernel:2.6.25:rc6 cpe:/o:linux:linux_kernel:2.6.25:rc7 cpe:/o:linux:linux_kernel:2.6.25:rc8 cpe:/o:linux:linux_kernel:2.6.25:rc9 cpe:/o:linux:linux_kernel:2.6.25.1 cpe:/o:linux:linux_kernel:2.6.25.2 cpe:/o:linux:linux_kernel:2.6.25.3 cpe:/o:linux:linux_kernel:2.6.25.4 cpe:/o:linux:linux_kernel:2.6.25.5 cpe:/o:linux:linux_kernel:2.6.25.6 cpe:/o:linux:linux_kernel:2.6.25.7 cpe:/o:linux:linux_kernel:2.6.25.8 cpe:/o:linux:linux_kernel:2.6.25.9 cpe:/o:linux:linux_kernel:2.6.25.10 cpe:/o:linux:linux_kernel:2.6.25.11 cpe:/o:linux:linux_kernel:2.6.25.12 cpe:/o:linux:linux_kernel:2.6.25.13 cpe:/o:linux:linux_kernel:2.6.25.14 cpe:/o:linux:linux_kernel:2.6.25.15 cpe:/o:linux:linux_kernel:2.6.25.16 cpe:/o:linux:linux_kernel:2.6.25.17 cpe:/o:linux:linux_kernel:2.6.25.18 cpe:/o:linux:linux_kernel:2.6.25.19 cpe:/o:linux:linux_kernel:2.6.25.20 cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:2.6.26:rc1 cpe:/o:linux:linux_kernel:2.6.26:rc2 cpe:/o:linux:linux_kernel:2.6.26:rc3 cpe:/o:linux:linux_kernel:2.6.26:rc4 cpe:/o:linux:linux_kernel:2.6.26:rc5 cpe:/o:linux:linux_kernel:2.6.26:rc6 cpe:/o:linux:linux_kernel:2.6.26:rc7 cpe:/o:linux:linux_kernel:2.6.26:rc8 cpe:/o:linux:linux_kernel:2.6.26:rc9 cpe:/o:linux:linux_kernel:2.6.26.1 cpe:/o:linux:linux_kernel:2.6.26.2 cpe:/o:linux:linux_kernel:2.6.26.3 cpe:/o:linux:linux_kernel:2.6.26.4 cpe:/o:linux:linux_kernel:2.6.26.5 cpe:/o:linux:linux_kernel:2.6.26.6 cpe:/o:linux:linux_kernel:2.6.26.7 cpe:/o:linux:linux_kernel:2.6.26.8 cpe:/o:linux:linux_kernel:2.6.27 cpe:/o:linux:linux_kernel:2.6.27:rc1 cpe:/o:linux:linux_kernel:2.6.27:rc2 cpe:/o:linux:linux_kernel:2.6.27:rc3 cpe:/o:linux:linux_kernel:2.6.27:rc4 cpe:/o:linux:linux_kernel:2.6.27:rc5 cpe:/o:linux:linux_kernel:2.6.27:rc6 cpe:/o:linux:linux_kernel:2.6.27:rc7 cpe:/o:linux:linux_kernel:2.6.27:rc8 cpe:/o:linux:linux_kernel:2.6.27:rc9 cpe:/o:linux:linux_kernel:2.6.27.1 cpe:/o:linux:linux_kernel:2.6.27.2 cpe:/o:linux:linux_kernel:2.6.27.3 cpe:/o:linux:linux_kernel:2.6.27.4 cpe:/o:linux:linux_kernel:2.6.27.5 cpe:/o:linux:linux_kernel:2.6.27.6 cpe:/o:linux:linux_kernel:2.6.27.7 cpe:/o:linux:linux_kernel:2.6.27.8 cpe:/o:linux:linux_kernel:2.6.27.9 cpe:/o:linux:linux_kernel:2.6.27.10 cpe:/o:linux:linux_kernel:2.6.27.11 cpe:/o:linux:linux_kernel:2.6.27.12 cpe:/o:linux:linux_kernel:2.6.27.13 cpe:/o:linux:linux_kernel:2.6.27.14 cpe:/o:linux:linux_kernel:2.6.27.15 cpe:/o:linux:linux_kernel:2.6.27.16 cpe:/o:linux:linux_kernel:2.6.27.17 cpe:/o:linux:linux_kernel:2.6.27.18 cpe:/o:linux:linux_kernel:2.6.27.19 cpe:/o:linux:linux_kernel:2.6.27.20 cpe:/o:linux:linux_kernel:2.6.27.21 cpe:/o:linux:linux_kernel:2.6.27.22 cpe:/o:linux:linux_kernel:2.6.27.23 cpe:/o:linux:linux_kernel:2.6.27.24 cpe:/o:linux:linux_kernel:2.6.27.25 cpe:/o:linux:linux_kernel:2.6.27.26 cpe:/o:linux:linux_kernel:2.6.27.27 cpe:/o:linux:linux_kernel:2.6.27.28 cpe:/o:linux:linux_kernel:2.6.27.29 cpe:/o:linux:linux_kernel:2.6.27.30 cpe:/o:linux:linux_kernel:2.6.27.31 cpe:/o:linux:linux_kernel:2.6.27.32 cpe:/o:linux:linux_kernel:2.6.27.33 cpe:/o:linux:linux_kernel:2.6.27.34 cpe:/o:linux:linux_kernel:2.6.27.35 cpe:/o:linux:linux_kernel:2.6.27.36 cpe:/o:linux:linux_kernel:2.6.27.37 cpe:/o:linux:linux_kernel:2.6.27.38 cpe:/o:linux:linux_kernel:2.6.27.39 cpe:/o:linux:linux_kernel:2.6.27.40 cpe:/o:linux:linux_kernel:2.6.27.41 cpe:/o:linux:linux_kernel:2.6.27.42 cpe:/o:linux:linux_kernel:2.6.27.43 cpe:/o:linux:linux_kernel:2.6.27.44 cpe:/o:linux:linux_kernel:2.6.27.45 cpe:/o:linux:linux_kernel:2.6.27.46 cpe:/o:linux:linux_kernel:2.6.27.47 cpe:/o:linux:linux_kernel:2.6.27.48 cpe:/o:linux:linux_kernel:2.6.27.49 cpe:/o:linux:linux_kernel:2.6.27.50 cpe:/o:linux:linux_kernel:2.6.27.51 cpe:/o:linux:linux_kernel:2.6.27.52 cpe:/o:linux:linux_kernel:2.6.27.53 cpe:/o:linux:linux_kernel:2.6.27.54 cpe:/o:linux:linux_kernel:2.6.27.55 cpe:/o:linux:linux_kernel:2.6.27.56 cpe:/o:linux:linux_kernel:2.6.27.57 cpe:/o:linux:linux_kernel:2.6.27.58 cpe:/o:linux:linux_kernel:2.6.27.59 cpe:/o:linux:linux_kernel:2.6.27.60 cpe:/o:linux:linux_kernel:2.6.27.61 cpe:/o:linux:linux_kernel:2.6.27.62 cpe:/o:linux:linux_kernel:2.6.28 cpe:/o:linux:linux_kernel:2.6.28:rc1 cpe:/o:linux:linux_kernel:2.6.28:rc2 cpe:/o:linux:linux_kernel:2.6.28:rc3 cpe:/o:linux:linux_kernel:2.6.28:rc4 cpe:/o:linux:linux_kernel:2.6.28:rc5 cpe:/o:linux:linux_kernel:2.6.28:rc6 cpe:/o:linux:linux_kernel:2.6.28:rc7 cpe:/o:linux:linux_kernel:2.6.28:rc8 cpe:/o:linux:linux_kernel:2.6.28:rc9 cpe:/o:linux:linux_kernel:2.6.28.1 cpe:/o:linux:linux_kernel:2.6.28.2 cpe:/o:linux:linux_kernel:2.6.28.3 cpe:/o:linux:linux_kernel:2.6.28.4 cpe:/o:linux:linux_kernel:2.6.28.5 cpe:/o:linux:linux_kernel:2.6.28.6 cpe:/o:linux:linux_kernel:2.6.28.7 cpe:/o:linux:linux_kernel:2.6.28.8 cpe:/o:linux:linux_kernel:2.6.28.9 cpe:/o:linux:linux_kernel:2.6.28.10 cpe:/o:linux:linux_kernel:2.6.29 cpe:/o:linux:linux_kernel:2.6.29:rc1 cpe:/o:linux:linux_kernel:2.6.29:rc2 cpe:/o:linux:linux_kernel:2.6.29:rc3 cpe:/o:linux:linux_kernel:2.6.29:rc4 cpe:/o:linux:linux_kernel:2.6.29:rc5 cpe:/o:linux:linux_kernel:2.6.29:rc6 cpe:/o:linux:linux_kernel:2.6.29:rc7 cpe:/o:linux:linux_kernel:2.6.29:rc8 cpe:/o:linux:linux_kernel:2.6.29.1 cpe:/o:linux:linux_kernel:2.6.29.2 cpe:/o:linux:linux_kernel:2.6.29.3 cpe:/o:linux:linux_kernel:2.6.29.4 cpe:/o:linux:linux_kernel:2.6.29.5 cpe:/o:linux:linux_kernel:2.6.29.6 cpe:/o:linux:linux_kernel:2.6.30 cpe:/o:linux:linux_kernel:2.6.30:rc1 cpe:/o:linux:linux_kernel:2.6.30:rc2 cpe:/o:linux:linux_kernel:2.6.30:rc3 cpe:/o:linux:linux_kernel:2.6.30:rc4 cpe:/o:linux:linux_kernel:2.6.30:rc5 cpe:/o:linux:linux_kernel:2.6.30:rc6 cpe:/o:linux:linux_kernel:2.6.30:rc7 cpe:/o:linux:linux_kernel:2.6.30:rc8 cpe:/o:linux:linux_kernel:2.6.30.1 cpe:/o:linux:linux_kernel:2.6.30.2 cpe:/o:linux:linux_kernel:2.6.30.3 cpe:/o:linux:linux_kernel:2.6.30.4 cpe:/o:linux:linux_kernel:2.6.30.5 cpe:/o:linux:linux_kernel:2.6.30.6 cpe:/o:linux:linux_kernel:2.6.30.7 cpe:/o:linux:linux_kernel:2.6.30.8 cpe:/o:linux:linux_kernel:2.6.30.9 cpe:/o:linux:linux_kernel:2.6.30.10 cpe:/o:linux:linux_kernel:2.6.31 cpe:/o:linux:linux_kernel:2.6.31:rc1 cpe:/o:linux:linux_kernel:2.6.31:rc2 cpe:/o:linux:linux_kernel:2.6.31:rc3 cpe:/o:linux:linux_kernel:2.6.31:rc4 cpe:/o:linux:linux_kernel:2.6.31:rc5 cpe:/o:linux:linux_kernel:2.6.31:rc6 cpe:/o:linux:linux_kernel:2.6.31:rc7 cpe:/o:linux:linux_kernel:2.6.31:rc8 cpe:/o:linux:linux_kernel:2.6.31:rc9 cpe:/o:linux:linux_kernel:2.6.31.1 cpe:/o:linux:linux_kernel:2.6.31.2 cpe:/o:linux:linux_kernel:2.6.31.3 cpe:/o:linux:linux_kernel:2.6.31.4 cpe:/o:linux:linux_kernel:2.6.31.5 cpe:/o:linux:linux_kernel:2.6.31.6 cpe:/o:linux:linux_kernel:2.6.31.7 cpe:/o:linux:linux_kernel:2.6.31.8 cpe:/o:linux:linux_kernel:2.6.31.9 cpe:/o:linux:linux_kernel:2.6.31.10 cpe:/o:linux:linux_kernel:2.6.31.11 cpe:/o:linux:linux_kernel:2.6.31.12 cpe:/o:linux:linux_kernel:2.6.31.13 cpe:/o:linux:linux_kernel:2.6.31.14 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.6.32:rc1 cpe:/o:linux:linux_kernel:2.6.32:rc3 cpe:/o:linux:linux_kernel:2.6.32:rc4 cpe:/o:linux:linux_kernel:2.6.32:rc5 cpe:/o:linux:linux_kernel:2.6.32:rc6 cpe:/o:linux:linux_kernel:2.6.32:rc7 cpe:/o:linux:linux_kernel:2.6.32:rc8 cpe:/o:linux:linux_kernel:2.6.32.1 cpe:/o:linux:linux_kernel:2.6.32.2 cpe:/o:linux:linux_kernel:2.6.32.3 cpe:/o:linux:linux_kernel:2.6.32.4 cpe:/o:linux:linux_kernel:2.6.32.5 cpe:/o:linux:linux_kernel:2.6.32.6 cpe:/o:linux:linux_kernel:2.6.32.7 cpe:/o:linux:linux_kernel:2.6.32.8 cpe:/o:linux:linux_kernel:2.6.32.9 cpe:/o:linux:linux_kernel:2.6.32.10 cpe:/o:linux:linux_kernel:2.6.32.11 cpe:/o:linux:linux_kernel:2.6.32.12 cpe:/o:linux:linux_kernel:2.6.32.13 cpe:/o:linux:linux_kernel:2.6.32.14 cpe:/o:linux:linux_kernel:2.6.32.15 cpe:/o:linux:linux_kernel:2.6.32.16 cpe:/o:linux:linux_kernel:2.6.32.17 cpe:/o:linux:linux_kernel:2.6.32.18 cpe:/o:linux:linux_kernel:2.6.32.19 cpe:/o:linux:linux_kernel:2.6.32.20 cpe:/o:linux:linux_kernel:2.6.32.21 cpe:/o:linux:linux_kernel:2.6.32.22 cpe:/o:linux:linux_kernel:2.6.32.23 cpe:/o:linux:linux_kernel:2.6.32.24 cpe:/o:linux:linux_kernel:2.6.32.25 cpe:/o:linux:linux_kernel:2.6.32.26 cpe:/o:linux:linux_kernel:2.6.32.27 cpe:/o:linux:linux_kernel:2.6.32.28 cpe:/o:linux:linux_kernel:2.6.32.29 cpe:/o:linux:linux_kernel:2.6.32.30 cpe:/o:linux:linux_kernel:2.6.32.31 cpe:/o:linux:linux_kernel:2.6.32.32 cpe:/o:linux:linux_kernel:2.6.32.33 cpe:/o:linux:linux_kernel:2.6.32.34 cpe:/o:linux:linux_kernel:2.6.32.35 cpe:/o:linux:linux_kernel:2.6.32.36 cpe:/o:linux:linux_kernel:2.6.32.37 cpe:/o:linux:linux_kernel:2.6.32.38 cpe:/o:linux:linux_kernel:2.6.32.39 cpe:/o:linux:linux_kernel:2.6.32.40 cpe:/o:linux:linux_kernel:2.6.32.41 cpe:/o:linux:linux_kernel:2.6.32.42 cpe:/o:linux:linux_kernel:2.6.32.43 cpe:/o:linux:linux_kernel:2.6.32.44 cpe:/o:linux:linux_kernel:2.6.32.45 cpe:/o:linux:linux_kernel:2.6.32.46 cpe:/o:linux:linux_kernel:2.6.32.47 cpe:/o:linux:linux_kernel:2.6.32.48 cpe:/o:linux:linux_kernel:2.6.32.49 cpe:/o:linux:linux_kernel:2.6.32.50 cpe:/o:linux:linux_kernel:2.6.32.51 cpe:/o:linux:linux_kernel:2.6.32.52 cpe:/o:linux:linux_kernel:2.6.32.53 cpe:/o:linux:linux_kernel:2.6.32.54 cpe:/o:linux:linux_kernel:2.6.32.55 cpe:/o:linux:linux_kernel:2.6.32.56 cpe:/o:linux:linux_kernel:2.6.32.57 cpe:/o:linux:linux_kernel:2.6.32.58 cpe:/o:linux:linux_kernel:2.6.33 cpe:/o:linux:linux_kernel:2.6.33:rc1 cpe:/o:linux:linux_kernel:2.6.33:rc2 cpe:/o:linux:linux_kernel:2.6.33:rc3 cpe:/o:linux:linux_kernel:2.6.33:rc4 cpe:/o:linux:linux_kernel:2.6.33:rc5 cpe:/o:linux:linux_kernel:2.6.33:rc6 cpe:/o:linux:linux_kernel:2.6.33:rc7 cpe:/o:linux:linux_kernel:2.6.33:rc8 cpe:/o:linux:linux_kernel:2.6.33.1 cpe:/o:linux:linux_kernel:2.6.33.2 cpe:/o:linux:linux_kernel:2.6.33.3 cpe:/o:linux:linux_kernel:2.6.33.4 cpe:/o:linux:linux_kernel:2.6.33.5 cpe:/o:linux:linux_kernel:2.6.33.6 cpe:/o:linux:linux_kernel:2.6.33.7 cpe:/o:linux:linux_kernel:2.6.33.8 cpe:/o:linux:linux_kernel:2.6.33.9 cpe:/o:linux:linux_kernel:2.6.33.10 cpe:/o:linux:linux_kernel:2.6.33.11 cpe:/o:linux:linux_kernel:2.6.33.12 cpe:/o:linux:linux_kernel:2.6.33.13 cpe:/o:linux:linux_kernel:2.6.33.14 cpe:/o:linux:linux_kernel:2.6.33.15 cpe:/o:linux:linux_kernel:2.6.33.16 cpe:/o:linux:linux_kernel:2.6.33.17 cpe:/o:linux:linux_kernel:2.6.33.18 cpe:/o:linux:linux_kernel:2.6.33.19 cpe:/o:linux:linux_kernel:2.6.33.20 cpe:/o:linux:linux_kernel:2.6.34 cpe:/o:linux:linux_kernel:2.6.34:rc1 cpe:/o:linux:linux_kernel:2.6.34:rc2 cpe:/o:linux:linux_kernel:2.6.34:rc3 cpe:/o:linux:linux_kernel:2.6.34:rc4 cpe:/o:linux:linux_kernel:2.6.34:rc5 cpe:/o:linux:linux_kernel:2.6.34:rc6 cpe:/o:linux:linux_kernel:2.6.34:rc7 cpe:/o:linux:linux_kernel:2.6.34.1 cpe:/o:linux:linux_kernel:2.6.34.2 cpe:/o:linux:linux_kernel:2.6.34.3 cpe:/o:linux:linux_kernel:2.6.34.4 cpe:/o:linux:linux_kernel:2.6.34.5 cpe:/o:linux:linux_kernel:2.6.34.6 cpe:/o:linux:linux_kernel:2.6.34.7 cpe:/o:linux:linux_kernel:2.6.34.8 cpe:/o:linux:linux_kernel:2.6.34.9 cpe:/o:linux:linux_kernel:2.6.34.10 cpe:/o:linux:linux_kernel:2.6.35 cpe:/o:linux:linux_kernel:2.6.35:rc1 cpe:/o:linux:linux_kernel:2.6.35:rc2 cpe:/o:linux:linux_kernel:2.6.35:rc3 cpe:/o:linux:linux_kernel:2.6.35:rc4 cpe:/o:linux:linux_kernel:2.6.35:rc5 cpe:/o:linux:linux_kernel:2.6.35:rc6 cpe:/o:linux:linux_kernel:2.6.35.1 cpe:/o:linux:linux_kernel:2.6.35.2 cpe:/o:linux:linux_kernel:2.6.35.3 cpe:/o:linux:linux_kernel:2.6.35.4 cpe:/o:linux:linux_kernel:2.6.35.5 cpe:/o:linux:linux_kernel:2.6.35.6 cpe:/o:linux:linux_kernel:2.6.35.7 cpe:/o:linux:linux_kernel:2.6.35.8 cpe:/o:linux:linux_kernel:2.6.35.9 cpe:/o:linux:linux_kernel:2.6.35.10 cpe:/o:linux:linux_kernel:2.6.35.11 cpe:/o:linux:linux_kernel:2.6.35.12 cpe:/o:linux:linux_kernel:2.6.35.13 cpe:/o:linux:linux_kernel:2.6.36 cpe:/o:linux:linux_kernel:2.6.36:rc1 cpe:/o:linux:linux_kernel:2.6.36:rc2 cpe:/o:linux:linux_kernel:2.6.36:rc3 cpe:/o:linux:linux_kernel:2.6.36:rc4 cpe:/o:linux:linux_kernel:2.6.36:rc5 cpe:/o:linux:linux_kernel:2.6.36:rc6 cpe:/o:linux:linux_kernel:2.6.36:rc7 cpe:/o:linux:linux_kernel:2.6.36:rc8 cpe:/o:linux:linux_kernel:2.6.36.1 cpe:/o:linux:linux_kernel:2.6.36.2 cpe:/o:linux:linux_kernel:2.6.36.3 cpe:/o:linux:linux_kernel:2.6.36.4 cpe:/o:linux:linux_kernel:2.6.37 cpe:/o:linux:linux_kernel:2.6.37:rc1 cpe:/o:linux:linux_kernel:2.6.37:rc2 cpe:/o:linux:linux_kernel:2.6.37:rc3 cpe:/o:linux:linux_kernel:2.6.37:rc4 cpe:/o:linux:linux_kernel:2.6.37:rc5 cpe:/o:linux:linux_kernel:2.6.37:rc6 cpe:/o:linux:linux_kernel:2.6.37:rc7 cpe:/o:linux:linux_kernel:2.6.37:rc8 cpe:/o:linux:linux_kernel:2.6.37.1 cpe:/o:linux:linux_kernel:2.6.37.2 cpe:/o:linux:linux_kernel:2.6.37.3 cpe:/o:linux:linux_kernel:2.6.37.4 cpe:/o:linux:linux_kernel:2.6.37.5 cpe:/o:linux:linux_kernel:2.6.37.6 cpe:/o:linux:linux_kernel:2.6.38 cpe:/o:linux:linux_kernel:2.6.38:rc1 cpe:/o:linux:linux_kernel:2.6.38:rc2 cpe:/o:linux:linux_kernel:2.6.38:rc3 cpe:/o:linux:linux_kernel:2.6.38:rc4 cpe:/o:linux:linux_kernel:2.6.38:rc5 cpe:/o:linux:linux_kernel:2.6.38:rc6 cpe:/o:linux:linux_kernel:2.6.38:rc7 cpe:/o:linux:linux_kernel:2.6.38:rc8 cpe:/o:linux:linux_kernel:2.6.38.1 cpe:/o:linux:linux_kernel:2.6.38.2 cpe:/o:linux:linux_kernel:2.6.38.3 cpe:/o:linux:linux_kernel:2.6.38.4 cpe:/o:linux:linux_kernel:2.6.38.5 cpe:/o:linux:linux_kernel:2.6.38.6 cpe:/o:linux:linux_kernel:2.6.38.7 cpe:/o:linux:linux_kernel:2.6.38.8 cpe:/o:linux:linux_kernel:2.6.39 cpe:/o:linux:linux_kernel:2.6.39:rc1 cpe:/o:linux:linux_kernel:2.6.39:rc2 cpe:/o:linux:linux_kernel:2.6.39:rc3 cpe:/o:linux:linux_kernel:2.6.39:rc4 cpe:/o:linux:linux_kernel:2.6.39:rc5 cpe:/o:linux:linux_kernel:2.6.39:rc6 cpe:/o:linux:linux_kernel:2.6.39:rc7 cpe:/o:linux:linux_kernel:2.6.39.1 cpe:/o:linux:linux_kernel:2.6.39.2 cpe:/o:linux:linux_kernel:2.6.39.3 cpe:/o:linux:linux_kernel:2.6.39.4 cpe:/o:linux:linux_kernel:3.0:rc1 cpe:/o:linux:linux_kernel:3.0:rc2 cpe:/o:linux:linux_kernel:3.0:rc3 cpe:/o:linux:linux_kernel:3.0:rc4 cpe:/o:linux:linux_kernel:3.0:rc5 cpe:/o:linux:linux_kernel:3.0:rc6 cpe:/o:linux:linux_kernel:3.0:rc7 cpe:/o:linux:linux_kernel:3.0.1 cpe:/o:linux:linux_kernel:3.0.2 cpe:/o:linux:linux_kernel:3.0.3 cpe:/o:linux:linux_kernel:3.0.4 cpe:/o:linux:linux_kernel:3.0.5 cpe:/o:linux:linux_kernel:3.0.6 cpe:/o:linux:linux_kernel:3.0.7 cpe:/o:linux:linux_kernel:3.0.8 cpe:/o:linux:linux_kernel:3.0.9 cpe:/o:linux:linux_kernel:3.0.10 cpe:/o:linux:linux_kernel:3.0.11 cpe:/o:linux:linux_kernel:3.0.12 cpe:/o:linux:linux_kernel:3.0.13 cpe:/o:linux:linux_kernel:3.0.14 cpe:/o:linux:linux_kernel:3.0.15 cpe:/o:linux:linux_kernel:3.0.16 cpe:/o:linux:linux_kernel:3.0.17 cpe:/o:linux:linux_kernel:3.0.18 cpe:/o:linux:linux_kernel:3.0.19 cpe:/o:linux:linux_kernel:3.0.20 cpe:/o:linux:linux_kernel:3.0.21 cpe:/o:linux:linux_kernel:3.0.22 cpe:/o:linux:linux_kernel:3.0.23 cpe:/o:linux:linux_kernel:3.0.24 cpe:/o:linux:linux_kernel:3.0.25 cpe:/o:linux:linux_kernel:3.0.26 cpe:/o:linux:linux_kernel:3.0.27 cpe:/o:linux:linux_kernel:3.0.28 cpe:/o:linux:linux_kernel:3.0.29 cpe:/o:linux:linux_kernel:3.0.30 cpe:/o:linux:linux_kernel:3.0.31 cpe:/o:linux:linux_kernel:3.0.32 cpe:/o:linux:linux_kernel:3.0.33 cpe:/o:linux:linux_kernel:3.0.34 cpe:/o:linux:linux_kernel:3.0.35 cpe:/o:linux:linux_kernel:3.0.36 cpe:/o:linux:linux_kernel:3.0.37 cpe:/o:linux:linux_kernel:3.0.38 cpe:/o:linux:linux_kernel:3.0.39 cpe:/o:linux:linux_kernel:3.0.40 cpe:/o:linux:linux_kernel:3.0.41 cpe:/o:linux:linux_kernel:3.0.42 cpe:/o:linux:linux_kernel:3.0.43 cpe:/o:linux:linux_kernel:3.0.44 cpe:/o:linux:linux_kernel:3.0.45 cpe:/o:linux:linux_kernel:3.0.46 cpe:/o:linux:linux_kernel:3.0.47 cpe:/o:linux:linux_kernel:3.0.48 cpe:/o:linux:linux_kernel:3.0.49 cpe:/o:linux:linux_kernel:3.0.50 cpe:/o:linux:linux_kernel:3.0.51 cpe:/o:linux:linux_kernel:3.0.52 cpe:/o:linux:linux_kernel:3.0.53 cpe:/o:linux:linux_kernel:3.0.54 cpe:/o:linux:linux_kernel:3.0.55 cpe:/o:linux:linux_kernel:3.0.56 cpe:/o:linux:linux_kernel:3.0.57 cpe:/o:linux:linux_kernel:3.0.58 cpe:/o:linux:linux_kernel:3.0.59 cpe:/o:linux:linux_kernel:3.0.60 cpe:/o:linux:linux_kernel:3.0.61 cpe:/o:linux:linux_kernel:3.0.62 cpe:/o:linux:linux_kernel:3.0.63 cpe:/o:linux:linux_kernel:3.0.64 cpe:/o:linux:linux_kernel:3.0.65 cpe:/o:linux:linux_kernel:3.0.66 cpe:/o:linux:linux_kernel:3.0.67 cpe:/o:linux:linux_kernel:3.0.68 cpe:/o:linux:linux_kernel:3.1 cpe:/o:linux:linux_kernel:3.1:rc1 cpe:/o:linux:linux_kernel:3.1:rc2 cpe:/o:linux:linux_kernel:3.1:rc3 cpe:/o:linux:linux_kernel:3.1:rc4 cpe:/o:linux:linux_kernel:3.1.1 cpe:/o:linux:linux_kernel:3.1.2 cpe:/o:linux:linux_kernel:3.1.3 cpe:/o:linux:linux_kernel:3.1.4 cpe:/o:linux:linux_kernel:3.1.5 cpe:/o:linux:linux_kernel:3.1.6 cpe:/o:linux:linux_kernel:3.1.7 cpe:/o:linux:linux_kernel:3.1.8 cpe:/o:linux:linux_kernel:3.1.9 cpe:/o:linux:linux_kernel:3.1.10 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:3.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.2:rc2 cpe:/o:linux:linux_kernel:3.2:rc3 cpe:/o:linux:linux_kernel:3.2:rc4 cpe:/o:linux:linux_kernel:3.2:rc5 cpe:/o:linux:linux_kernel:3.2:rc6 cpe:/o:linux:linux_kernel:3.2:rc7 cpe:/o:linux:linux_kernel:3.2.1 cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.2.2 cpe:/o:linux:linux_kernel:3.2.3 cpe:/o:linux:linux_kernel:3.2.4 cpe:/o:linux:linux_kernel:3.2.5 cpe:/o:linux:linux_kernel:3.2.6 cpe:/o:linux:linux_kernel:3.2.7 cpe:/o:linux:linux_kernel:3.2.8 cpe:/o:linux:linux_kernel:3.2.9 cpe:/o:linux:linux_kernel:3.2.10 cpe:/o:linux:linux_kernel:3.2.11 cpe:/o:linux:linux_kernel:3.2.12 cpe:/o:linux:linux_kernel:3.2.13 cpe:/o:linux:linux_kernel:3.2.14 cpe:/o:linux:linux_kernel:3.2.15 cpe:/o:linux:linux_kernel:3.2.16 cpe:/o:linux:linux_kernel:3.2.17 cpe:/o:linux:linux_kernel:3.2.18 cpe:/o:linux:linux_kernel:3.2.19 cpe:/o:linux:linux_kernel:3.2.20 cpe:/o:linux:linux_kernel:3.2.21 cpe:/o:linux:linux_kernel:3.2.22 cpe:/o:linux:linux_kernel:3.2.23 cpe:/o:linux:linux_kernel:3.2.24 cpe:/o:linux:linux_kernel:3.2.25 cpe:/o:linux:linux_kernel:3.2.26 cpe:/o:linux:linux_kernel:3.2.27 cpe:/o:linux:linux_kernel:3.2.28 cpe:/o:linux:linux_kernel:3.2.29 cpe:/o:linux:linux_kernel:3.2.30 cpe:/o:linux:linux_kernel:3.3 cpe:/o:linux:linux_kernel:3.3:rc1 cpe:/o:linux:linux_kernel:3.3:rc2 cpe:/o:linux:linux_kernel:3.3:rc3 cpe:/o:linux:linux_kernel:3.3:rc4 cpe:/o:linux:linux_kernel:3.3:rc5 cpe:/o:linux:linux_kernel:3.3:rc6 cpe:/o:linux:linux_kernel:3.3:rc7 cpe:/o:linux:linux_kernel:3.3.1 cpe:/o:linux:linux_kernel:3.3.2 cpe:/o:linux:linux_kernel:3.3.3 cpe:/o:linux:linux_kernel:3.3.4 cpe:/o:linux:linux_kernel:3.3.5 cpe:/o:linux:linux_kernel:3.3.6 cpe:/o:linux:linux_kernel:3.3.7 cpe:/o:linux:linux_kernel:3.3.8 cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc1 cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc2 cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc3 cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc4 cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc5 cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc6 cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc7 cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~ cpe:/o:linux:linux_kernel:3.4.1 cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.2 cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.3 cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.4 cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.5 cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.6 cpe:/o:linux:linux_kernel:3.4.7 cpe:/o:linux:linux_kernel:3.4.8 cpe:/o:linux:linux_kernel:3.4.9 cpe:/o:linux:linux_kernel:3.4.10 cpe:/o:linux:linux_kernel:3.4.11 cpe:/o:linux:linux_kernel:3.4.12 cpe:/o:linux:linux_kernel:3.4.13 cpe:/o:linux:linux_kernel:3.4.14 cpe:/o:linux:linux_kernel:3.4.15 cpe:/o:linux:linux_kernel:3.4.16 cpe:/o:linux:linux_kernel:3.4.17 cpe:/o:linux:linux_kernel:3.4.18 cpe:/o:linux:linux_kernel:3.4.19 cpe:/o:linux:linux_kernel:3.4.20 cpe:/o:linux:linux_kernel:3.4.21 cpe:/o:linux:linux_kernel:3.4.22 cpe:/o:linux:linux_kernel:3.4.23 cpe:/o:linux:linux_kernel:3.4.24 cpe:/o:linux:linux_kernel:3.4.25 cpe:/o:linux:linux_kernel:3.4.26 cpe:/o:linux:linux_kernel:3.4.27 cpe:/o:linux:linux_kernel:3.4.28 cpe:/o:linux:linux_kernel:3.4.29 cpe:/o:linux:linux_kernel:3.4.30 cpe:/o:linux:linux_kernel:3.4.31 cpe:/o:linux:linux_kernel:3.4.32 cpe:/o:linux:linux_kernel:3.4.33 cpe:/o:linux:linux_kernel:3.4.34 cpe:/o:linux:linux_kernel:3.4.35 cpe:/o:linux:linux_kernel:3.4.36 cpe:/o:linux:linux_kernel:3.4.37 cpe:/o:linux:linux_kernel:3.4.38 cpe:/o:linux:linux_kernel:3.4.39 cpe:/o:linux:linux_kernel:3.4.40 cpe:/o:linux:linux_kernel:3.4.41 cpe:/o:linux:linux_kernel:3.4.42 cpe:/o:linux:linux_kernel:3.4.43 cpe:/o:linux:linux_kernel:3.4.44 cpe:/o:linux:linux_kernel:3.4.45 cpe:/o:linux:linux_kernel:3.4.46 cpe:/o:linux:linux_kernel:3.4.47 cpe:/o:linux:linux_kernel:3.4.48 cpe:/o:linux:linux_kernel:3.4.49 cpe:/o:linux:linux_kernel:3.4.50 cpe:/o:linux:linux_kernel:3.4.51 cpe:/o:linux:linux_kernel:3.4.52 cpe:/o:linux:linux_kernel:3.4.53 cpe:/o:linux:linux_kernel:3.4.54 cpe:/o:linux:linux_kernel:3.4.55 cpe:/o:linux:linux_kernel:3.4.56 cpe:/o:linux:linux_kernel:3.4.57 cpe:/o:linux:linux_kernel:3.4.58 cpe:/o:linux:linux_kernel:3.4.59 cpe:/o:linux:linux_kernel:3.4.60 cpe:/o:linux:linux_kernel:3.4.61 cpe:/o:linux:linux_kernel:3.4.62 cpe:/o:linux:linux_kernel:3.4.63 cpe:/o:linux:linux_kernel:3.4.64 cpe:/o:linux:linux_kernel:3.4.65 cpe:/o:linux:linux_kernel:3.4.66 cpe:/o:linux:linux_kernel:3.4.67 cpe:/o:linux:linux_kernel:3.4.68 cpe:/o:linux:linux_kernel:3.4.69 cpe:/o:linux:linux_kernel:3.4.70 cpe:/o:linux:linux_kernel:3.4.71 cpe:/o:linux:linux_kernel:3.4.72 cpe:/o:linux:linux_kernel:3.4.73 cpe:/o:linux:linux_kernel:3.4.74 cpe:/o:linux:linux_kernel:3.4.75 cpe:/o:linux:linux_kernel:3.4.76 cpe:/o:linux:linux_kernel:3.4.77 cpe:/o:linux:linux_kernel:3.4.78 cpe:/o:linux:linux_kernel:3.4.79 cpe:/o:linux:linux_kernel:3.5.1 cpe:/o:linux:linux_kernel:3.5.2 cpe:/o:linux:linux_kernel:3.5.3 cpe:/o:linux:linux_kernel:3.5.4 cpe:/o:linux:linux_kernel:3.5.5 cpe:/o:linux:linux_kernel:3.5.6 cpe:/o:linux:linux_kernel:3.5.7 cpe:/o:linux:linux_kernel:3.6 cpe:/o:linux:linux_kernel:3.6.1 cpe:/o:linux:linux_kernel:3.6.2 cpe:/o:linux:linux_kernel:3.6.3 cpe:/o:linux:linux_kernel:3.6.4 cpe:/o:linux:linux_kernel:3.6.5 cpe:/o:linux:linux_kernel:3.6.6 cpe:/o:linux:linux_kernel:3.6.7 cpe:/o:linux:linux_kernel:3.6.8 cpe:/o:linux:linux_kernel:3.6.9 cpe:/o:linux:linux_kernel:3.6.10 cpe:/o:linux:linux_kernel:3.6.11 cpe:/o:linux:linux_kernel:3.7 cpe:/o:linux:linux_kernel:3.7.1 cpe:/o:linux:linux_kernel:3.7.2 cpe:/o:linux:linux_kernel:3.7.3 cpe:/o:linux:linux_kernel:3.7.4 cpe:/o:linux:linux_kernel:3.7.5 cpe:/o:linux:linux_kernel:3.7.6 cpe:/o:linux:linux_kernel:3.7.7 cpe:/o:linux:linux_kernel:3.7.8 cpe:/o:linux:linux_kernel:3.7.9 cpe:/o:linux:linux_kernel:3.7.10 cpe:/o:linux:linux_kernel:3.8.0 cpe:/o:linux:linux_kernel:3.8.1 cpe:/o:linux:linux_kernel:3.8.2 cpe:/o:linux:linux_kernel:3.8.3 cpe:/o:linux:linux_kernel:3.8.4 cpe:/o:linux:linux_kernel:3.8.5 cpe:/o:linux:linux_kernel:3.8.6 cpe:/o:linux:linux_kernel:3.8.7 cpe:/o:linux:linux_kernel:3.8.8 cpe:/o:linux:linux_kernel:3.8.9 cpe:/o:linux:linux_kernel:3.8.10 cpe:/o:linux:linux_kernel:3.8.11 cpe:/o:linux:linux_kernel:3.8.12 cpe:/o:linux:linux_kernel:3.8.13 cpe:/o:linux:linux_kernel:3.9:rc1 cpe:/o:linux:linux_kernel:3.9:rc2 cpe:/o:linux:linux_kernel:3.9:rc3 cpe:/o:linux:linux_kernel:3.9:rc4 cpe:/o:linux:linux_kernel:3.9:rc5 cpe:/o:linux:linux_kernel:3.9:rc6 cpe:/o:linux:linux_kernel:3.9:rc7 cpe:/o:linux:linux_kernel:3.9.0 cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.1 cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.2 cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.3 cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.4 cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.5 cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.6 cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.7 cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.8 cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.9 cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.10 cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.11 cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.1 cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.2 cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.3 cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.4 cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.5 cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.6 cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.7 cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.8 cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.9 cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.10 cpe:/o:linux:linux_kernel:3.10.11 cpe:/o:linux:linux_kernel:3.10.12 cpe:/o:linux:linux_kernel:3.10.13 cpe:/o:linux:linux_kernel:3.10.14 cpe:/o:linux:linux_kernel:3.10.15 cpe:/o:linux:linux_kernel:3.10.16 cpe:/o:linux:linux_kernel:3.10.17 cpe:/o:linux:linux_kernel:3.10.18 cpe:/o:linux:linux_kernel:3.10.19 cpe:/o:linux:linux_kernel:3.10.20 cpe:/o:linux:linux_kernel:3.10.21 cpe:/o:linux:linux_kernel:3.10.22 cpe:/o:linux:linux_kernel:3.10.23 cpe:/o:linux:linux_kernel:3.10.24 cpe:/o:linux:linux_kernel:3.10.25 cpe:/o:linux:linux_kernel:3.10.26 cpe:/o:linux:linux_kernel:3.10.27 cpe:/o:linux:linux_kernel:3.10.28 cpe:/o:linux:linux_kernel:3.10.29 cpe:/o:linux:linux_kernel:3.11 cpe:/o:linux:linux_kernel:3.11.1 cpe:/o:linux:linux_kernel:3.11.2 cpe:/o:linux:linux_kernel:3.11.3 cpe:/o:linux:linux_kernel:3.11.4 cpe:/o:linux:linux_kernel:3.11.5 cpe:/o:linux:linux_kernel:3.11.6 cpe:/o:linux:linux_kernel:3.11.7 cpe:/o:linux:linux_kernel:3.11.8 cpe:/o:linux:linux_kernel:3.11.9 cpe:/o:linux:linux_kernel:3.11.10 cpe:/o:linux:linux_kernel:3.12 cpe:/o:linux:linux_kernel:3.12.1 cpe:/o:linux:linux_kernel:3.12.2 cpe:/o:linux:linux_kernel:3.12.3 cpe:/o:linux:linux_kernel:3.12.4 cpe:/o:linux:linux_kernel:3.12.5 cpe:/o:linux:linux_kernel:3.12.6 cpe:/o:linux:linux_kernel:3.12.7 cpe:/o:linux:linux_kernel:3.12.8 cpe:/o:linux:linux_kernel:3.12.9 cpe:/o:linux:linux_kernel:3.12.10 cpe:/o:linux:linux_kernel:3.12.11 cpe:/o:linux:linux_kernel:3.12.12 cpe:/o:linux:linux_kernel:3.12.13 cpe:/o:linux:linux_kernel:3.12.14 cpe:/o:linux:linux_kernel:3.12.15 cpe:/o:linux:linux_kernel:3.12.16 cpe:/o:linux:linux_kernel:3.12.17 cpe:/o:linux:linux_kernel:3.13 cpe:/o:linux:linux_kernel:3.13.1 cpe:/o:linux:linux_kernel:3.13.2 cpe:/o:linux:linux_kernel:3.13.3 cpe:/o:linux:linux_kernel:3.13.4 cpe:/o:linux:linux_kernel:3.13.5 cpe:/o:linux:linux_kernel:3.13.6 cpe:/o:linux:linux_kernel:3.13.7 cpe:/o:linux:linux_kernel:3.13.8 cpe:/o:linux:linux_kernel:3.13.9 cpe:/o:linux:linux_kernel:3.13.10 cpe:/o:linux:linux_kernel:3.13.11 cpe:/o:linux:linux_kernel:3.14:- cpe:/o:linux:linux_kernel:3.14:rc1 cpe:/o:linux:linux_kernel:3.14:rc2 cpe:/o:linux:linux_kernel:3.14:rc3 cpe:/o:linux:linux_kernel:3.14:rc4 cpe:/o:linux:linux_kernel:3.14:rc5 cpe:/o:linux:linux_kernel:3.14:rc6 cpe:/o:linux:linux_kernel:3.14:rc7 cpe:/o:linux:linux_kernel:3.14:rc8 cpe:/o:linux:linux_kernel:3.14.1 cpe:/o:linux:linux_kernel:3.14.2 cpe:/o:linux:linux_kernel:3.14.3 cpe:/o:linux:linux_kernel:3.14.4 cpe:/o:linux:linux_kernel:3.14.5 cpe:/o:linux:linux_kernel:3.15 cpe:/o:linux:linux_kernel:3.15.1 cpe:/o:linux:linux_kernel:3.15.2 cpe:/o:linux:linux_kernel:3.15.3 cpe:/o:linux:linux_kernel:3.15.4 cpe:/o:linux:linux_kernel:3.15.5 cpe:/o:linux:linux_kernel:3.15.6 cpe:/o:linux:linux_kernel:3.15.7 cpe:/o:linux:linux_kernel:3.15.8 cpe:/o:linux:linux_kernel:3.16.0 cpe:/o:linux:linux_kernel:3.16.1 cpe:/o:linux:linux_kernel:3.18.0 cpe:/o:linux:linux_kernel:3.18.1 cpe:/o:linux:linux_kernel:3.18.2 cpe:/o:linux:linux_kernel:3.18.3 cpe:/o:linux:linux_kernel:3.18.4

CVE-2015-0239

2015-03-02T06:59:04.693-05:00

2016-12-23T21:59:04.663-05:00

4.7

LOCAL

HIGH

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f3747379accba8e95d70cec0eae0582c8c182050 MLIST [bk-commits-head] 20150123 KVM: x86: SYSENTER emulation is broken REDHAT RHSA-2015:1272 DEBIAN DSA-3170 CONFIRM http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5 MANDRIVA MDVSA-2015:058 MLIST [oss-security] 20150127 KVM SYSENTER emulation vulnerability - CVE-2015-0239 CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html BID 72842 UBUNTU USN-2513-1 UBUNTU USN-2514-1 UBUNTU USN-2515-1 UBUNTU USN-2516-1 UBUNTU USN-2517-1 UBUNTU USN-2518-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1186448 CONFIRM https://github.com/torvalds/linux/commit/f3747379accba8e95d70cec0eae0582c8c182050 The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction.

cpe:/a:samba:samba:3.5.0 cpe:/a:samba:samba:3.5.1 cpe:/a:samba:samba:3.5.2 cpe:/a:samba:samba:3.5.3 cpe:/a:samba:samba:3.5.4 cpe:/a:samba:samba:3.5.5 cpe:/a:samba:samba:3.5.6 cpe:/a:samba:samba:3.5.7 cpe:/a:samba:samba:3.5.8 cpe:/a:samba:samba:3.5.9 cpe:/a:samba:samba:3.5.10 cpe:/a:samba:samba:3.5.11 cpe:/a:samba:samba:3.5.12 cpe:/a:samba:samba:3.5.13 cpe:/a:samba:samba:3.5.14 cpe:/a:samba:samba:3.5.15 cpe:/a:samba:samba:3.5.16 cpe:/a:samba:samba:3.5.17 cpe:/a:samba:samba:3.5.18 cpe:/a:samba:samba:3.5.19 cpe:/a:samba:samba:3.5.20 cpe:/a:samba:samba:3.5.21 cpe:/a:samba:samba:3.5.22 cpe:/a:samba:samba:3.6.0 cpe:/a:samba:samba:3.6.1 cpe:/a:samba:samba:3.6.2 cpe:/a:samba:samba:3.6.10 cpe:/a:samba:samba:3.6.11 cpe:/a:samba:samba:3.6.12 cpe:/a:samba:samba:3.6.13 cpe:/a:samba:samba:3.6.14 cpe:/a:samba:samba:3.6.15 cpe:/a:samba:samba:3.6.16 cpe:/a:samba:samba:3.6.17 cpe:/a:samba:samba:3.6.18 cpe:/a:samba:samba:3.6.19 cpe:/a:samba:samba:3.6.20 cpe:/a:samba:samba:3.6.21 cpe:/a:samba:samba:3.6.22 cpe:/a:samba:samba:3.6.23 cpe:/a:samba:samba:3.6.24 cpe:/a:samba:samba:4.0.0 cpe:/a:samba:samba:4.0.1 cpe:/a:samba:samba:4.0.2 cpe:/a:samba:samba:4.0.3 cpe:/a:samba:samba:4.0.4 cpe:/a:samba:samba:4.0.5 cpe:/a:samba:samba:4.0.6 cpe:/a:samba:samba:4.0.7 cpe:/a:samba:samba:4.0.8 cpe:/a:samba:samba:4.0.9 cpe:/a:samba:samba:4.0.10 cpe:/a:samba:samba:4.0.11 cpe:/a:samba:samba:4.0.12 cpe:/a:samba:samba:4.0.13 cpe:/a:samba:samba:4.0.14 cpe:/a:samba:samba:4.0.15 cpe:/a:samba:samba:4.0.16 cpe:/a:samba:samba:4.0.17 cpe:/a:samba:samba:4.0.18 cpe:/a:samba:samba:4.0.19 cpe:/a:samba:samba:4.0.20 cpe:/a:samba:samba:4.0.21 cpe:/a:samba:samba:4.0.22 cpe:/a:samba:samba:4.0.23 cpe:/a:samba:samba:4.0.24 cpe:/a:samba:samba:4.1.0 cpe:/a:samba:samba:4.1.1 cpe:/a:samba:samba:4.1.2 cpe:/a:samba:samba:4.1.3 cpe:/a:samba:samba:4.1.4 cpe:/a:samba:samba:4.1.5 cpe:/a:samba:samba:4.1.6 cpe:/a:samba:samba:4.1.7 cpe:/a:samba:samba:4.1.8 cpe:/a:samba:samba:4.1.9 cpe:/a:samba:samba:4.1.10 cpe:/a:samba:samba:4.1.11 cpe:/a:samba:samba:4.1.12 cpe:/a:samba:samba:4.1.13 cpe:/a:samba:samba:4.1.14 cpe:/a:samba:samba:4.1.15 cpe:/a:samba:samba:4.1.16 cpe:/a:samba:samba:4.2.0:rc1 cpe:/a:samba:samba:4.2.0:rc2 cpe:/a:samba:samba:4.2.0:rc3 cpe:/a:samba:samba:4.2.0:rc4 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:novell:suse_linux_enterprise_desktop:12 cpe:/o:novell:suse_linux_enterprise_server:12 cpe:/o:novell:suse_linux_enterprise_software_development_kit:12 cpe:/o:redhat:enterprise_linux:5 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0240

2015-02-23T20:59:00.050-05:00

2019-04-22T13:48:00.643-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0084.html SUSE SUSE-SU-2015:0353 SUSE SUSE-SU-2015:0371 SUSE openSUSE-SU-2015:0375 SUSE SUSE-SU-2015:0386 SUSE openSUSE-SU-2016:1064 SUSE openSUSE-SU-2016:1106 SUSE openSUSE-SU-2016:1107 HP SSRT101979 HP SSRT101952 REDHAT RHSA-2015:0249 REDHAT RHSA-2015:0250 REDHAT RHSA-2015:0251 REDHAT RHSA-2015:0252 REDHAT RHSA-2015:0253 REDHAT RHSA-2015:0254 REDHAT RHSA-2015:0255 REDHAT RHSA-2015:0256 REDHAT RHSA-2015:0257 GENTOO GLSA-201502-15 DEBIAN DSA-3171 MANDRIVA MDVSA-2015:081 MANDRIVA MDVSA-2015:082 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html BID 72711 SECTRACK 1031783 SLACKWARE SSA:2015-064-01 UBUNTU USN-2508-1 CONFIRM https://access.redhat.com/articles/1346913 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1191325 CONFIRM https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ CONFIRM https://support.lenovo.com/product_security/samba_remote_vuln CONFIRM https://support.lenovo.com/us/en/product_security/samba_remote_vuln EXPLOIT-DB 36741 CONFIRM https://www.samba.org/samba/security/CVE-2015-0240 The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

cpe:/a:d-bus_project:d-bus:1.4.0 cpe:/a:d-bus_project:d-bus:1.4.1 cpe:/a:d-bus_project:d-bus:1.4.4 cpe:/a:d-bus_project:d-bus:1.4.6 cpe:/a:d-bus_project:d-bus:1.4.8 cpe:/a:d-bus_project:d-bus:1.4.10 cpe:/a:d-bus_project:d-bus:1.4.12 cpe:/a:d-bus_project:d-bus:1.4.14 cpe:/a:d-bus_project:d-bus:1.4.16 cpe:/a:d-bus_project:d-bus:1.4.18 cpe:/a:d-bus_project:d-bus:1.4.20 cpe:/a:d-bus_project:d-bus:1.4.24 cpe:/a:d-bus_project:d-bus:1.4.26 cpe:/a:d-bus_project:d-bus:1.5.0 cpe:/a:d-bus_project:d-bus:1.5.2 cpe:/a:d-bus_project:d-bus:1.5.4 cpe:/a:d-bus_project:d-bus:1.5.6 cpe:/a:d-bus_project:d-bus:1.5.8 cpe:/a:d-bus_project:d-bus:1.5.10 cpe:/a:d-bus_project:d-bus:1.5.12 cpe:/a:d-bus_project:d-bus:1.6.0 cpe:/a:d-bus_project:d-bus:1.6.2 cpe:/a:d-bus_project:d-bus:1.6.4 cpe:/a:d-bus_project:d-bus:1.6.6 cpe:/a:d-bus_project:d-bus:1.6.8 cpe:/a:d-bus_project:d-bus:1.6.10 cpe:/a:d-bus_project:d-bus:1.6.12 cpe:/a:d-bus_project:d-bus:1.6.14 cpe:/a:d-bus_project:d-bus:1.6.16 cpe:/a:d-bus_project:d-bus:1.6.18 cpe:/a:d-bus_project:d-bus:1.6.20 cpe:/a:d-bus_project:d-bus:1.6.22 cpe:/a:d-bus_project:d-bus:1.6.24 cpe:/a:d-bus_project:d-bus:1.6.26 cpe:/a:d-bus_project:d-bus:1.6.28 cpe:/a:d-bus_project:d-bus:1.8.0 cpe:/a:d-bus_project:d-bus:1.8.2 cpe:/a:d-bus_project:d-bus:1.8.4 cpe:/a:d-bus_project:d-bus:1.8.6 cpe:/a:d-bus_project:d-bus:1.8.8 cpe:/a:d-bus_project:d-bus:1.8.10 cpe:/a:d-bus_project:d-bus:1.8.12 cpe:/a:d-bus_project:d-bus:1.8.14 cpe:/a:d-bus_project:d-bus:1.9.0 cpe:/a:d-bus_project:d-bus:1.9.2 cpe:/a:d-bus_project:d-bus:1.9.4 cpe:/a:d-bus_project:d-bus:1.9.6 cpe:/a:d-bus_project:d-bus:1.9.8 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0245

2015-02-13T10:59:08.337-05:00

2018-10-30T12:27:35.843-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0071.html SUSE openSUSE-SU-2015:0300 DEBIAN DSA-3161 MANDRIVA MDVSA-2015:176 MLIST [oss-security] 20150209 CVE-2015-0245: denial of service in dbus >= 1.4 systemd activation CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.

CVE-2015-0246

2015-02-09T10:59:00.180-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1493. Reason: This candidate is a reservation duplicate of CVE-2015-1493. Notes: All CVE users should reference CVE-2015-1493 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:e2fsprogs_project:e2fsprogs:1.42.11 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21

CVE-2015-0247

2015-02-17T10:59:02.983-05:00

2018-10-09T15:55:33.920-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0061.html CONFIRM http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=f66e6ce4 FEDORA FEDORA-2015-1840 FEDORA FEDORA-2015-2511 FEDORA FEDORA-2015-2516 SUSE SUSE-SU-2015:1103 SUSE openSUSE-SU-2015:1006 MISC http://packetstormsecurity.com/files/130283/e2fsprogs-Input-Sanitization.html DEBIAN DSA-3166 MANDRIVA MDVSA-2015:045 MANDRIVA MDVSA-2015:067 MISC http://www.ocert.org/advisories/ocert-2015-002.html BUGTRAQ 20150205 [oCERT-2015-002] e2fsprogs input sanitization errors BID 72520 UBUNTU USN-2507-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1187032 XF e2fsprogs-cve20150247-bo(100740) GENTOO GLSA-201701-06 Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.

cpe:/a:apache:subversion:1.6.0 cpe:/a:apache:subversion:1.6.1 cpe:/a:apache:subversion:1.6.2 cpe:/a:apache:subversion:1.6.3 cpe:/a:apache:subversion:1.6.4 cpe:/a:apache:subversion:1.6.5 cpe:/a:apache:subversion:1.6.6 cpe:/a:apache:subversion:1.6.7 cpe:/a:apache:subversion:1.6.8 cpe:/a:apache:subversion:1.6.9 cpe:/a:apache:subversion:1.6.10 cpe:/a:apache:subversion:1.6.11 cpe:/a:apache:subversion:1.6.12 cpe:/a:apache:subversion:1.6.13 cpe:/a:apache:subversion:1.6.14 cpe:/a:apache:subversion:1.6.15 cpe:/a:apache:subversion:1.6.16 cpe:/a:apache:subversion:1.6.17 cpe:/a:apache:subversion:1.6.18 cpe:/a:apache:subversion:1.6.19 cpe:/a:apache:subversion:1.6.20 cpe:/a:apache:subversion:1.6.21 cpe:/a:apache:subversion:1.6.23 cpe:/a:apache:subversion:1.7.0 cpe:/a:apache:subversion:1.7.1 cpe:/a:apache:subversion:1.7.2 cpe:/a:apache:subversion:1.7.3 cpe:/a:apache:subversion:1.7.4 cpe:/a:apache:subversion:1.7.5 cpe:/a:apache:subversion:1.7.6 cpe:/a:apache:subversion:1.7.7 cpe:/a:apache:subversion:1.7.8 cpe:/a:apache:subversion:1.7.9 cpe:/a:apache:subversion:1.7.10 cpe:/a:apache:subversion:1.7.11 cpe:/a:apache:subversion:1.7.12 cpe:/a:apache:subversion:1.7.13 cpe:/a:apache:subversion:1.7.14 cpe:/a:apache:subversion:1.7.15 cpe:/a:apache:subversion:1.7.16 cpe:/a:apache:subversion:1.7.17 cpe:/a:apache:subversion:1.7.18 cpe:/a:apache:subversion:1.7.19 cpe:/a:apache:subversion:1.8.0 cpe:/a:apache:subversion:1.8.1 cpe:/a:apache:subversion:1.8.2 cpe:/a:apache:subversion:1.8.3 cpe:/a:apache:subversion:1.8.4 cpe:/a:apache:subversion:1.8.5 cpe:/a:apache:subversion:1.8.6 cpe:/a:apache:subversion:1.8.7 cpe:/a:apache:subversion:1.8.8 cpe:/a:apache:subversion:1.8.9 cpe:/a:apache:subversion:1.8.10 cpe:/a:apache:subversion:1.8.11 cpe:/a:apple:xcode:7.0 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2 cpe:/o:oracle:solaris:11.3 cpe:/o:redhat:enterprise_linux_desktop:6.0 cpe:/o:redhat:enterprise_linux_hpc_node:6 cpe:/o:redhat:enterprise_linux_server:6.0 cpe:/o:redhat:enterprise_linux_server_eus:6.7.z cpe:/o:redhat:enterprise_linux_workstation:6.0

CVE-2015-0248

2015-04-08T14:59:01.827-04:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2015-09-16-2 SUSE openSUSE-SU-2015:0672 REDHAT RHSA-2015:1633 REDHAT RHSA-2015:1742 CONFIRM http://subversion.apache.org/security/CVE-2015-0248-advisory.txt DEBIAN DSA-3231 MANDRIVA MDVSA-2015:192 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html BID 74260 SECTRACK 1033214 UBUNTU USN-2721-1 GENTOO GLSA-201610-05 CONFIRM https://support.apple.com/HT205217 The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.

cpe:/a:apache:roller:5.1.0 cpe:/a:apache:roller:5.1.1

CVE-2015-0249

2017-07-17T09:18:03.123-04:00

2017-07-27T13:41:06.590-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2017-07-18T10:31:42.357-04:00

MISC http://cve.killedkenny.io/cve/CVE-2015-0249 MLIST [oss-security] 20150330 Fwd: CVE-2015-0249: Apache Roller allows admin users to execute arbitrary Java code CONFIRM https://mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw@mail.gmail.com%3E The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (aka VTL).

cpe:/a:apache:batik:1.7 cpe:/a:redhat:jboss_enterprise_brms_platform:6.1.2 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10

CVE-2015-0250

2015-03-24T13:59:00.070-04:00

2017-11-03T21:29:01.910-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0138.html MISC http://packetstormsecurity.com/files/130964/Apache-Batik-XXE-Injection.html REDHAT RHSA-2016:0041 REDHAT RHSA-2016:0042 FULLDISC 20150322 [CVE-2015-0250] Apache Batik Information Disclosure Vulnerability (XXE Injection) DEBIAN DSA-3205 MANDRIVA MDVSA-2015:203 SECTRACK 1032781 UBUNTU USN-2548-1 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21963275 CONFIRM http://xmlgraphics.apache.org/security.html XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.

cpe:/a:apache:subversion:1.5.0 cpe:/a:apache:subversion:1.5.1 cpe:/a:apache:subversion:1.5.2 cpe:/a:apache:subversion:1.5.3 cpe:/a:apache:subversion:1.5.4 cpe:/a:apache:subversion:1.5.5 cpe:/a:apache:subversion:1.5.6 cpe:/a:apache:subversion:1.5.7 cpe:/a:apache:subversion:1.5.8 cpe:/a:apache:subversion:1.6.0 cpe:/a:apache:subversion:1.6.1 cpe:/a:apache:subversion:1.6.2 cpe:/a:apache:subversion:1.6.3 cpe:/a:apache:subversion:1.6.4 cpe:/a:apache:subversion:1.6.5 cpe:/a:apache:subversion:1.6.6 cpe:/a:apache:subversion:1.6.7 cpe:/a:apache:subversion:1.6.8 cpe:/a:apache:subversion:1.6.9 cpe:/a:apache:subversion:1.6.10 cpe:/a:apache:subversion:1.6.11 cpe:/a:apache:subversion:1.6.12 cpe:/a:apache:subversion:1.6.13 cpe:/a:apache:subversion:1.6.14 cpe:/a:apache:subversion:1.6.15 cpe:/a:apache:subversion:1.6.16 cpe:/a:apache:subversion:1.6.17 cpe:/a:apache:subversion:1.6.18 cpe:/a:apache:subversion:1.6.19 cpe:/a:apache:subversion:1.6.20 cpe:/a:apache:subversion:1.6.21 cpe:/a:apache:subversion:1.6.23 cpe:/a:apache:subversion:1.7.0 cpe:/a:apache:subversion:1.7.1 cpe:/a:apache:subversion:1.7.2 cpe:/a:apache:subversion:1.7.3 cpe:/a:apache:subversion:1.7.4 cpe:/a:apache:subversion:1.7.5 cpe:/a:apache:subversion:1.7.6 cpe:/a:apache:subversion:1.7.7 cpe:/a:apache:subversion:1.7.8 cpe:/a:apache:subversion:1.7.9 cpe:/a:apache:subversion:1.7.10 cpe:/a:apache:subversion:1.7.11 cpe:/a:apache:subversion:1.7.12 cpe:/a:apache:subversion:1.7.13 cpe:/a:apache:subversion:1.7.14 cpe:/a:apache:subversion:1.7.15 cpe:/a:apache:subversion:1.7.16 cpe:/a:apache:subversion:1.7.17 cpe:/a:apache:subversion:1.7.18 cpe:/a:apache:subversion:1.7.19 cpe:/a:apache:subversion:1.8.0 cpe:/a:apache:subversion:1.8.1 cpe:/a:apache:subversion:1.8.2 cpe:/a:apache:subversion:1.8.3 cpe:/a:apache:subversion:1.8.4 cpe:/a:apache:subversion:1.8.5 cpe:/a:apache:subversion:1.8.6 cpe:/a:apache:subversion:1.8.7 cpe:/a:apache:subversion:1.8.8 cpe:/a:apache:subversion:1.8.9 cpe:/a:apache:subversion:1.8.10 cpe:/a:apache:subversion:1.8.11 cpe:/a:apple:xcode:7.0 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2 cpe:/o:oracle:solaris:11.3 cpe:/o:redhat:enterprise_linux_desktop:6.0 cpe:/o:redhat:enterprise_linux_hpc_node:6.0 cpe:/o:redhat:enterprise_linux_server:6.0 cpe:/o:redhat:enterprise_linux_server_eus:6.7.z cpe:/o:redhat:enterprise_linux_workstation:6.0

CVE-2015-0251

2015-04-08T14:59:02.843-04:00

2018-10-30T12:27:35.843-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2015-09-16-2 SUSE openSUSE-SU-2015:0672 REDHAT RHSA-2015:1633 REDHAT RHSA-2015:1742 FULLDISC 20150611 Apache vulnerability program faulting module ntdll.dll CONFIRM http://subversion.apache.org/security/CVE-2015-0251-advisory.txt DEBIAN DSA-3231 MANDRIVA MDVSA-2015:192 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html BID 74259 SECTRACK 1033214 UBUNTU USN-2721-1 GENTOO GLSA-201610-05 CONFIRM https://support.apple.com/HT205217 The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

cpe:/a:apache:xerces-c:3.1.1 cpe:/o:debian:debian_linux:7.1 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21 cpe:/o:fedoraproject:fedora:22

CVE-2015-0252

2015-03-24T13:59:01.507-04:00

2018-10-16T21:29:21.897-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-4226 FEDORA FEDORA-2015-4272 FEDORA FEDORA-2015-4251 FEDORA FEDORA-2015-4228 FEDORA FEDORA-2015-4321 FEDORA FEDORA-2015-4285 SUSE openSUSE-SU-2016:0966 MISC http://packetstormsecurity.com/files/131756/Apache-Xerces-C-XML-Parser-Denial-Of-Service.html REDHAT RHSA-2015:1193 DEBIAN DSA-3199 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html BID 73252 SECTRACK 1032254 CONFIRM http://xerces.apache.org/xerces-c/secadv/CVE-2015-0252.txt CONFIRM https://shibboleth.net/community/advisories/secadv_20150319.txt EXPLOIT-DB 36906 internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) via crafted XML data.

cpe:/a:apache:http_server:2.4.12 cpe:/o:apple:mac_os_x:10.10.4 cpe:/o:apple:mac_os_x_server:5.0.3 cpe:/o:oracle:linux:7.0 cpe:/o:oracle:solaris:11.3

CVE-2015-0253

2015-07-20T19:59:00.067-04:00

2018-01-04T21:29:58.807-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://httpd.apache.org/security/vulnerabilities_24.html APPLE APPLE-SA-2015-08-13-2 APPLE APPLE-SA-2015-09-16-4 REDHAT RHSA-2015:1666 CONFIRM http://www.apache.org/dist/httpd/CHANGES_2.4 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html BID 75964 SECTRACK 1032967 CONFIRM https://bz.apache.org/bugzilla/show_bug.cgi?id=57531 CONFIRM https://github.com/apache/httpd/commit/6a974059190b8a0c7e499f4ab12fe108127099cb MLIST [httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html CONFIRM https://support.apple.com/HT205219 CONFIRM https://support.apple.com/kb/HT205031 The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.

cpe:/a:apache:standard_taglibs:1.2.1 cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10

CVE-2015-0254

2015-03-09T10:59:04.263-04:00

2019-03-25T07:34:31.823-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:1751 MLIST [tomcat-taglibs-user] 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags MISC http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html REDHAT RHSA-2015:1695 REDHAT RHSA-2016:1838 REDHAT RHSA-2016:1839 REDHAT RHSA-2016:1840 REDHAT RHSA-2016:1841 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html BUGTRAQ 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags BID 72809 SECTRACK 1034934 UBUNTU USN-2551-1 REDHAT RHSA-2016:1376 MLIST [tomcat-dev] 20190319 svn commit: r1855831 [27/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ MLIST [tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.

cpe:/a:x.org:xorg-server:1.16.3 cpe:/a:x.org:xorg-server:1.17.0 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0255

2015-02-13T10:59:09.367-05:00

2018-10-30T12:27:35.843-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0073.html SUSE openSUSE-SU-2015:0337 SUSE openSUSE-SU-2015:0338 REDHAT RHSA-2015:0797 DEBIAN DSA-3160 MANDRIVA MDVSA-2015:119 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html BID 72578 UBUNTU USN-2500-1 CONFIRM http://www.x.org/wiki/Development/Security/Advisory-2015-02-10/ GENTOO GLSA-201504-06 X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.

cpe:/a:redhat:enterprise_virtualization_manager:3.5.0

CVE-2015-0257

2015-05-01T11:59:03.800-04:00

2016-06-28T14:23:31.260-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-06-28T13:55:18.653-04:00

REDHAT RHSA-2015:0888 SECTRACK 1032231 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.

cpe:/a:openstack:nova:2014.1 cpe:/a:openstack:nova:2014.1.1 cpe:/a:openstack:nova:2014.1.2 cpe:/a:openstack:nova:2014.1.3 cpe:/a:openstack:nova:2014.2 cpe:/a:openstack:nova:2014.2.1 cpe:/a:openstack:nova:2014.2.2 cpe:/a:openstack:nova:2015.1.0:milestone1 cpe:/a:openstack:nova:2015.1.0:milestone2

CVE-2015-0259

2015-04-01T10:59:01.380-04:00

2018-11-16T10:07:47.280-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2018-11-15T15:26:25.720-05:00

MLIST [openstack-announce] 20150313 [OSSA 2015-005] Nova console Cross-Site WebSocket hijacking (CVE-2015-0259) REDHAT RHSA-2015:0790 REDHAT RHSA-2015:0843 REDHAT RHSA-2015:0844 CONFIRM https://bugs.launchpad.net/nova/+bug/1409142 OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

cpe:/a:kallithea:kallithea:0.1 cpe:/a:rhodecode:rhodecode_enterprise:2.2.6

CVE-2015-0260

2015-02-16T10:59:01.293-05:00

2017-09-07T21:29:38.480-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov MLIST [oss-security] 20150210 CVE-2015-0260: Kallithea: API key of repository's creator exposed by get_repo API method BID 72573 XF kallithea-cve20150260-info-disc(100888) CONFIRM https://kallithea-scm.org/security/cve-2015-0260.html CONFIRM https://rhodecode.com/blog/rhodecode-enterprise-security-release/ RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

cpe:/a:tcpdump:tcpdump:4.7.0

CVE-2015-0261

2015-03-24T13:59:02.790-04:00

2018-10-09T15:55:36.997-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0114.html FEDORA FEDORA-2015-4939 FEDORA FEDORA-2015-4804 SUSE openSUSE-SU-2015:0616 MISC http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html DEBIAN DSA-3193 MANDRIVA MDVSA-2015:125 MANDRIVA MDVSA-2015:182 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html BUGTRAQ 20150309 tcpdump 4.7.2 remote crashes BID 73019 SECTRACK 1031937 UBUNTU USN-2580-1 REDHAT RHSA-2017:1871 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1201792 GENTOO GLSA-201510-04 Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.

CVE-2015-0262

2018-02-21T09:29:00.377-05:00

2018-02-21T09:29:00.390-05:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

cpe:/a:apache:camel:2.13.3 cpe:/a:apache:camel:2.14.0 cpe:/a:apache:camel:2.14.1

CVE-2015-0263

2015-06-03T16:59:02.917-04:00

2019-05-24T07:29:01.610-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2015:1041 REDHAT RHSA-2015:1538 REDHAT RHSA-2015:1539 SECTRACK 1032442 CONFIRM https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.asc CONFIRM https://git-wip-us.apache.org/repos/asf?p=camel.git;a=commitdiff;h=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36 MLIST [camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html MLIST [camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

cpe:/a:apache:camel:2.13.3 cpe:/a:apache:camel:2.14.0 cpe:/a:apache:camel:2.14.1

CVE-2015-0264

2015-06-03T16:59:04.403-04:00

2019-05-24T07:29:01.783-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2015:1041 REDHAT RHSA-2015:1538 REDHAT RHSA-2015:1539 SECTRACK 1032442 CONFIRM https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc CONFIRM https://git-wip-us.apache.org/repos/asf?p=camel.git;a=commitdiff;h=1df559649a96a1ca0368373387e542f46e4820da MLIST [camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html MLIST [camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.

cpe:/a:apache:ranger:0.4.0

CVE-2015-0265

2016-04-11T15:59:00.117-04:00

2016-04-12T18:36:19.773-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-04-12T13:35:44.023-04:00

BID 76208 MISC http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security CONFIRM https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger MLIST [ranger-dev] 20150805 CVEs fixed in Ranger 0.5 Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header.

cpe:/a:apache:ranger:0.4.0.

CVE-2015-0266

2016-04-11T15:59:01.210-04:00

2016-04-13T14:12:37.997-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2016-04-12T13:37:24.000-04:00

BID 76221 MISC http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security CONFIRM https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger MLIST [ranger-dev] 20150805 CVEs fixed in Ranger 0.5 The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs.

cpe:/a:redhat:kexec-tools:2.0.7-11

CVE-2015-0267

2015-05-19T14:59:00.090-04:00

2016-11-28T14:16:17.837-05:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2015:0986 BID 74622 The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.

cpe:/o:xen:xen:4.5.0

CVE-2015-0268

2015-02-16T10:59:03.183-05:00

2018-10-30T12:26:52.653-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 72591 SECTRACK 1031746 CONFIRM http://xenbits.xen.org/xsa/advisory-117.html XF xen-cve20150268-dos(100868) The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writing an invalid value to the GICD.SGIR register.

cpe:/a:contao:contao_cms:3.2.18 cpe:/a:contao:contao_cms:3.4.0 cpe:/a:contao:contao_cms:3.4.0:beta1 cpe:/a:contao:contao_cms:3.4.1 cpe:/a:contao:contao_cms:3.4.2 cpe:/a:contao:contao_cms:3.4.3

CVE-2015-0269

2017-05-26T13:29:00.180-04:00

2017-06-08T09:38:14.167-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-06-07T11:52:55.030-04:00

CONFIRM https://contao.org/en/news/contao-3_2_19.html CONFIRM https://contao.org/en/news/contao-3_4_4.html CONFIRM https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.html Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.

cpe:/a:redhat:openstack:5.0 cpe:/a:redhat:openstack:6.0

CVE-2015-0271

2015-03-10T10:59:05.523-04:00

2015-10-05T17:34:37.393-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-02T14:30:00.707-04:00

REDHAT RHSA-2015:0645 REDHAT RHSA-2015:0840 REDHAT RHSA-2015:0841 The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path.

cpe:/a:gnome:networkmanager:-

CVE-2015-0272

2015-11-17T10:59:00.150-05:00

2016-12-06T22:01:51.553-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d5fc88e573fa58b93034b04d35a2454f5d28cad9 SUSE SUSE-SU-2015:2108 SUSE SUSE-SU-2015:2194 SUSE SUSE-SU-2015:2292 SUSE SUSE-SU-2015:2339 SUSE SUSE-SU-2015:2350 SUSE SUSE-SU-2016:0354 SUSE SUSE-SU-2016:2074 CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html BID 76814 UBUNTU USN-2792-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1192132 GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.

cpe:/a:php:php:5.4.37 cpe:/a:php:php:5.5.0 cpe:/a:php:php:5.5.0:alpha1 cpe:/a:php:php:5.5.0:alpha2 cpe:/a:php:php:5.5.0:alpha3 cpe:/a:php:php:5.5.0:alpha4 cpe:/a:php:php:5.5.0:alpha5 cpe:/a:php:php:5.5.0:alpha6 cpe:/a:php:php:5.5.0:beta1 cpe:/a:php:php:5.5.0:beta2 cpe:/a:php:php:5.5.0:beta3 cpe:/a:php:php:5.5.0:beta4 cpe:/a:php:php:5.5.0:rc1 cpe:/a:php:php:5.5.0:rc2 cpe:/a:php:php:5.5.1 cpe:/a:php:php:5.5.2 cpe:/a:php:php:5.5.3 cpe:/a:php:php:5.5.4 cpe:/a:php:php:5.5.5 cpe:/a:php:php:5.5.6 cpe:/a:php:php:5.5.7 cpe:/a:php:php:5.5.8 cpe:/a:php:php:5.5.9 cpe:/a:php:php:5.5.10 cpe:/a:php:php:5.5.11 cpe:/a:php:php:5.5.12 cpe:/a:php:php:5.5.13 cpe:/a:php:php:5.5.14 cpe:/a:php:php:5.5.15 cpe:/a:php:php:5.5.16 cpe:/a:php:php:5.5.17 cpe:/a:php:php:5.5.18 cpe:/a:php:php:5.5.19 cpe:/a:php:php:5.5.20 cpe:/a:php:php:5.5.21 cpe:/a:php:php:5.6.0:alpha1 cpe:/a:php:php:5.6.0:alpha2 cpe:/a:php:php:5.6.0:alpha3 cpe:/a:php:php:5.6.0:alpha4 cpe:/a:php:php:5.6.0:alpha5 cpe:/a:php:php:5.6.0:beta1 cpe:/a:php:php:5.6.0:beta2 cpe:/a:php:php:5.6.0:beta3 cpe:/a:php:php:5.6.0:beta4 cpe:/a:php:php:5.6.1 cpe:/a:php:php:5.6.2 cpe:/a:php:php:5.6.3 cpe:/a:php:php:5.6.4 cpe:/a:php:php:5.6.5

CVE-2015-0273

2015-03-30T06:59:06.507-04:00

2018-01-04T21:29:59.163-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://git.php.net/?p=php-src.git;a=commit;h=71335e6ebabc1b12c057d8017fd811892ecdfd24 APPLE APPLE-SA-2015-06-30-2 APPLE APPLE-SA-2015-10-21-4 APPLE APPLE-SA-2015-09-30-3 SUSE SUSE-SU-2015:0424 SUSE SUSE-SU-2015:0436 SUSE openSUSE-SU-2015:0440 HP SSRT102066 HP HPSBMU03380 HP HPSBMU03409 CONFIRM http://php.net/ChangeLog-5.php REDHAT RHSA-2015:1053 REDHAT RHSA-2015:1066 REDHAT RHSA-2015:1135 REDHAT RHSA-2015:1218 CONFIRM http://support.apple.com/kb/HT204942 DEBIAN DSA-3195 MANDRIVA MDVSA-2015:079 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html BID 72701 SECTRACK 1031945 UBUNTU USN-2535-1 CONFIRM https://bugs.php.net/bug.php?id=68942 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1194730 GENTOO GLSA-201606-10 CONFIRM https://support.apple.com/HT205267 CONFIRM https://support.apple.com/HT205375 Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.

cpe:/o:linux:linux_kernel:3.14.5

CVE-2015-0274

2015-03-16T06:59:05.007-04:00

2015-03-26T21:59:52.033-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59 REDHAT RHSA-2015:0290 REDHAT RHSA-2015:0694 SECTRACK 1031853 UBUNTU USN-2543-1 UBUNTU USN-2544-1 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1195248 CONFIRM https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59 The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.

cpe:/o:linux:linux_kernel:4.0.5 cpe:/o:oracle:linux:7.0

CVE-2015-0275

2015-10-19T06:59:00.113-04:00

2019-04-08T16:29:06.017-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8 REDHAT RHSA-2015:1778 REDHAT RHSA-2015:1787 MLIST [oss-security] 20150223 CVE-2015-0275 -- Linux kernel: fs: ext4: fallocate zero range page size > block size BUG() CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html BID 75139 SECTRACK 1034454 MLIST [linux-ext4] 20150218 [PATCH] ext4: Allocate entire range in zero range CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1193907 CONFIRM https://github.com/torvalds/linux/commit/0f2af21aae11972fa924374ddcf52e88347cf5a8 CONFIRM https://support.f5.com/csp/article/K05211147 The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.

cpe:/a:kallithea:kallithea:0.1

CVE-2015-0276

2017-09-21T10:29:00.150-04:00

2017-09-30T06:17:10.503-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-09-29T19:18:47.167-04:00

MLIST [oss-security] 20150410 CVE-2015-0276: Kallithea: Lack of CSRF attack protection enables gaining unauthorised access to users' accounts BID 74052 CONFIRM https://kallithea-scm.org/security/cve-2015-0276.html Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

cpe:/a:picketlink:picketlink:2.6.0:cr5

CVE-2015-0277

2015-08-17T16:59:00.107-04:00

2015-08-19T12:59:57.597-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-08-19T12:47:17.503-04:00

REDHAT RHSA-2015:0846 REDHAT RHSA-2015:0847 REDHAT RHSA-2015:0848 REDHAT RHSA-2015:0849 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1194832 CONFIRM https://issues.jboss.org/browse/PLINK-678 The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.

cpe:/a:libuv_project:libuv:0.10.33 cpe:/o:fedoraproject:fedora:21

CVE-2015-0278

2015-05-18T11:59:02.713-04:00

2018-08-13T17:47:51.633-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0186.html MANDRIVA MDVSA-2015:228 CONFIRM https://github.com/libuv/libuv/commit/66ab38918c911bcff025562cf06237d7fedaba0c CONFIRM https://github.com/libuv/libuv/pull/215 CONFIRM https://groups.google.com/forum/#!msg/libuv/0JZxwLMtsMI/jraczskYWWQJ FEDORA FEDORA-2015-2313 GENTOO GLSA-201611-10 libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.

cpe:/a:redhat:richfaces:4.0.0 cpe:/a:redhat:richfaces:4.1.0 cpe:/a:redhat:richfaces:4.2.0 cpe:/a:redhat:richfaces:4.2.1 cpe:/a:redhat:richfaces:4.2.2 cpe:/a:redhat:richfaces:4.2.3 cpe:/a:redhat:richfaces:4.3.0 cpe:/a:redhat:richfaces:4.3.1 cpe:/a:redhat:richfaces:4.3.3 cpe:/a:redhat:richfaces:4.3.4 cpe:/a:redhat:richfaces:4.3.5 cpe:/a:redhat:richfaces:4.5.0:- cpe:/a:redhat:richfaces:4.5.0:alpha1 cpe:/a:redhat:richfaces:4.5.0:alpha3 cpe:/a:redhat:richfaces:4.5.0:beta1 cpe:/a:redhat:richfaces:4.5.0:beta2 cpe:/a:redhat:richfaces:4.5.0:candidate_release1 cpe:/a:redhat:richfaces:4.5.0:candidate_release2 cpe:/a:redhat:richfaces:4.5.1 cpe:/a:redhat:richfaces:4.5.2 cpe:/a:redhat:richfaces:4.5.3 cpe:/a:redhat:richfaces:4.5.4

CVE-2015-0279

2015-03-26T10:59:00.070-04:00

2019-07-23T16:15:11.000-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov JVN JVN#56297719 JVNDB JVNDB-2015-001959 MISC http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html REDHAT RHSA-2015:0719 FULLDISC 20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE) CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1192140 JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.

cpe:/a:gnu:gnutls:3.0.9

CVE-2015-0282

2015-03-24T13:59:04.007-04:00

2018-01-04T21:29:59.227-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov REDHAT RHSA-2015:1457 DEBIAN DSA-3191 CONFIRM http://www.gnutls.org/security.html BID 73119 SECTRACK 1032148 GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

cpe:/a:redhat:slapi-nis:0.54.1

CVE-2015-0283

2015-03-30T10:59:00.070-04:00

2016-12-30T21:59:16.607-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2015-4747 FEDORA FEDORA-2015-4788 REDHAT RHSA-2015:0728 BID 73377 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1195729 CONFIRM https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097 The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

cpe:/a:redhat:network_satellite:5.7 cpe:/a:redhat:spacewalk-java:-

CVE-2015-0284

2016-04-14T10:59:00.147-04:00

2016-04-18T11:11:08.413-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-04-18T10:16:55.237-04:00

REDHAT RHSA-2016:0590 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1181152 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1181472 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1314906 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1315398 CONFIRM https://github.com/spacewalkproject/spacewalk/commit/dd418384171473c3e31386a1b4792f8c555dc744 CONFIRM https://github.com/spacewalkproject/spacewalk/commit/f3792c79c1c251a49cc4e382be8591636326a794 Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811.

cpe:/a:openssl:openssl:1.0.2 cpe:/a:openssl:openssl:1.0.2:beta1 cpe:/a:openssl:openssl:1.0.2:beta2 cpe:/a:openssl:openssl:1.0.2:beta3

CVE-2015-0285

2015-03-19T18:59:03.723-04:00

2018-11-29T09:47:50.490-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-11-28T12:11:41.353-05:00

HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 CONFIRM http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73234 SECTRACK 1031929 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202410 CONFIRM https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=e1b568dd2462f7cacf98f3d117936c34e2849a6b CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.

CVE-2015-0286

2015-03-19T18:59:04.677-04:00

2018-01-04T21:29:59.337-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 APPLE APPLE-SA-2015-06-30-2 APPLE APPLE-SA-2015-09-16-1 APPLE APPLE-SA-2015-09-30-3 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 FEDORA FEDORA-2015-6951 FEDORA FEDORA-2015-6855 SUSE SUSE-SU-2015:0541 SUSE SUSE-SU-2015:0578 SUSE openSUSE-SU-2015:1277 SUSE openSUSE-SU-2016:0640 SUSE openSUSE-SU-2015:0554 HP HPSBGN03306 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03413 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2016:2957 CONFIRM http://support.apple.com/kb/HT204942 DEBIAN DSA-3197 CONFIRM http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73225 SECTRACK 1031929 SECTRACK 1032917 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202366 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 CONFIRM https://support.apple.com/HT205212 CONFIRM https://support.apple.com/HT205267 CONFIRM https://support.citrix.com/article/CTX216642 FREEBSD FreeBSD-SA-15:06 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.

CVE-2015-0287

2015-03-19T18:59:05.770-04:00

2017-11-14T21:29:06.203-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 APPLE APPLE-SA-2015-06-30-2 APPLE APPLE-SA-2015-09-16-1 APPLE APPLE-SA-2015-09-30-3 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 FEDORA FEDORA-2015-6951 FEDORA FEDORA-2015-6855 SUSE SUSE-SU-2015:0541 SUSE SUSE-SU-2015:0578 SUSE openSUSE-SU-2015:1277 SUSE openSUSE-SU-2016:0640 SUSE SUSE-SU-2016:0678 SUSE openSUSE-SU-2015:0554 HP HPSBGN03306 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2015:0800 CONFIRM http://support.apple.com/kb/HT204942 DEBIAN DSA-3197 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73227 SECTRACK 1031929 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202380 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=b717b083073b6cacc0a5e2397b661678aff7ae7f CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://support.apple.com/HT205212 CONFIRM https://support.apple.com/HT205267 CONFIRM https://support.citrix.com/article/CTX216642 FREEBSD FreeBSD-SA-15:06 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.

CVE-2015-0288

2015-03-19T18:59:06.880-04:00

2017-11-14T21:29:06.297-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 APPLE APPLE-SA-2015-06-30-2 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 FEDORA FEDORA-2015-6951 FEDORA FEDORA-2015-6855 SUSE SUSE-SU-2015:0541 SUSE SUSE-SU-2015:0578 SUSE openSUSE-SU-2015:1277 SUSE openSUSE-SU-2016:0640 SUSE openSUSE-SU-2015:0554 HP HPSBGN03306 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03413 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2015:0800 CONFIRM http://support.apple.com/kb/HT204942 DEBIAN DSA-3197 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73237 SECTRACK 1031929 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202418 CONFIRM https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=28a00bcd8e318da18031b2ac8778c64147cd54f9 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 CONFIRM https://rt.openssl.org/Ticket/Display.html?id=3708&user=guest&pass=guest GENTOO GLSA-201503-11 CONFIRM https://support.citrix.com/article/CTX216642 FREEBSD FreeBSD-SA-15:06 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.

CVE-2015-0289

2015-03-19T18:59:07.833-04:00

2017-10-19T21:29:05.190-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 APPLE APPLE-SA-2015-06-30-2 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 FEDORA FEDORA-2015-6951 FEDORA FEDORA-2015-6855 SUSE SUSE-SU-2015:0541 SUSE SUSE-SU-2015:0578 SUSE openSUSE-SU-2015:1277 SUSE openSUSE-SU-2016:0640 SUSE openSUSE-SU-2015:0554 HP HPSBGN03306 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2015:0800 CONFIRM http://support.apple.com/kb/HT204942 DEBIAN DSA-3197 CONFIRM http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73231 SECTRACK 1031929 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202384 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 FREEBSD FreeBSD-SA-15:06 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.

cpe:/a:openssl:openssl:1.0.2 cpe:/a:openssl:openssl:1.0.2:beta1 cpe:/a:openssl:openssl:1.0.2:beta2 cpe:/a:openssl:openssl:1.0.2:beta3

CVE-2015-0290

2015-03-19T18:59:08.787-04:00

2018-11-29T09:48:04.817-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-11-28T12:18:16.247-05:00

HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73226 SECTRACK 1031929 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202345 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=77c77f0a1b9f15b869ca3342186dfbedd1119d0e CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.

cpe:/a:openssl:openssl:1.0.2 cpe:/a:openssl:openssl:1.0.2:beta1 cpe:/a:openssl:openssl:1.0.2:beta2 cpe:/a:openssl:openssl:1.0.2:beta3

CVE-2015-0291

2015-03-19T18:59:09.660-04:00

2018-11-29T09:48:16.317-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-11-28T12:16:56.343-05:00

HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 CONFIRM http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73235 SECTRACK 1031929 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202338 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=76343947ada960b6269090638f5391068daee88d CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.

cpe:/a:openssl:openssl:0.9.8z cpe:/a:openssl:openssl:1.0.0 cpe:/a:openssl:openssl:1.0.0a cpe:/a:openssl:openssl:1.0.0b cpe:/a:openssl:openssl:1.0.0c cpe:/a:openssl:openssl:1.0.0d cpe:/a:openssl:openssl:1.0.0e cpe:/a:openssl:openssl:1.0.0f cpe:/a:openssl:openssl:1.0.0g cpe:/a:openssl:openssl:1.0.0h cpe:/a:openssl:openssl:1.0.0i cpe:/a:openssl:openssl:1.0.0j cpe:/a:openssl:openssl:1.0.0k cpe:/a:openssl:openssl:1.0.0l cpe:/a:openssl:openssl:1.0.1 cpe:/a:openssl:openssl:1.0.1a cpe:/a:openssl:openssl:1.0.1b cpe:/a:openssl:openssl:1.0.1c cpe:/a:openssl:openssl:1.0.1d cpe:/a:openssl:openssl:1.0.1e cpe:/a:openssl:openssl:1.0.1f cpe:/a:openssl:openssl:1.0.1g

CVE-2015-0292

2015-03-19T18:59:10.690-04:00

2017-11-14T21:29:06.377-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 SUSE SUSE-SU-2015:0578 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2015:0800 DEBIAN DSA-3197 CONFIRM http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html BID 73228 SECTRACK 1031929 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202395 CONFIRM https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=d0666f289ac013094bbbf547bfbcd616199b7d2d CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 CONFIRM https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest GENTOO GLSA-201503-11 CONFIRM https://support.citrix.com/article/CTX216642 CONFIRM https://www.openssl.org/news/secadv_20150319.txt Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.

CVE-2015-0293

2015-03-19T18:59:11.537-04:00

2018-01-18T13:18:01.277-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 APPLE APPLE-SA-2015-06-30-2 FEDORA FEDORA-2015-4303 FEDORA FEDORA-2015-4320 FEDORA FEDORA-2015-4300 FEDORA FEDORA-2015-6951 FEDORA FEDORA-2015-6855 SUSE SUSE-SU-2015:0541 SUSE SUSE-SU-2015:0578 SUSE SUSE-SU-2016:0617 SUSE SUSE-SU-2016:0620 SUSE SUSE-SU-2016:0621 SUSE SUSE-SU-2016:0624 SUSE openSUSE-SU-2016:0628 SUSE SUSE-SU-2016:0631 SUSE openSUSE-SU-2016:0637 SUSE openSUSE-SU-2016:0638 SUSE openSUSE-SU-2016:0640 SUSE SUSE-SU-2016:0641 SUSE openSUSE-SU-2016:0720 SUSE SUSE-SU-2016:1057 SUSE openSUSE-SU-2015:0554 HP SSRT102000 HP HPSBMU03380 HP HPSBMU03409 HP HPSBMU03397 REDHAT RHSA-2015:0715 REDHAT RHSA-2015:0716 REDHAT RHSA-2015:0752 REDHAT RHSA-2015:0800 CONFIRM http://support.apple.com/kb/HT204942 MANDRIVA MDVSA-2015:062 MANDRIVA MDVSA-2015:063 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html BID 73232 SECTRACK 1031929 UBUNTU USN-2537-1 CONFIRM https://access.redhat.com/articles/1384453 CONFIRM https://bto.bluecoat.com/security-advisory/sa92 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1202404 CONFIRM https://git.openssl.org/?p=openssl.git;a=commit;h=86f8fb0e344d62454f8daf3e15236b2b59210756 CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10110 GENTOO GLSA-201503-11 CONFIRM https://support.citrix.com/article/CTX216642 FREEBSD FreeBSD-SA-15:06 CONFIRM https://www.openssl.org/news/secadv_20150319.txt The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.

cpe:/a:digia:qt:5.4.1 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21 cpe:/o:fedoraproject:fedora:22 cpe:/o:opensuse:opensuse:13.1

CVE-2015-0295

2015-03-25T10:59:01.720-04:00

2018-10-30T12:27:34.687-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-2895 FEDORA FEDORA-2015-2897 FEDORA FEDORA-2015-2866 FEDORA FEDORA-2015-2869 FEDORA FEDORA-2015-2886 FEDORA FEDORA-2015-2901 SUSE openSUSE-SU-2015:0573 MLIST [Announce] 20150227 Qt Security Advisory: DoS vulnerability in the BMP image handler BID 73029 UBUNTU USN-2626-1 The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.

cpe:/a:tug:texlive:3.1.20140525_r34255.fc21 cpe:/a:tug:texlive:6.20131226_r32488.fc20

CVE-2015-0296

2017-10-06T18:29:00.260-04:00

2017-11-01T08:46:52.997-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-10-19T09:56:23.960-04:00

FEDORA FEDORA-2015-4332 FEDORA FEDORA-2015-4872 MLIST [oss-security] 20150227 CVE-2015-0296 preinstall scriptlet in texlive-base rpm of fedora allows unprivileged user to delete arbitrary files(maybe others) BID 72826 CONFIRM https://bugzilla.redhat.com/show_bug.cgi?id=1197082 The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

cpe:/a:redhat:jboss_operations_network:3.3.1

CVE-2015-0297

2015-04-24T10:59:06.000-04:00

2015-10-05T17:33:54.643-04:00

9.0

NETWORK

LOW

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov

2015-10-02T14:52:06.670-04:00

REDHAT RHSA-2015:0862 SECTRACK 1032181 Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.

cpe:/a:redhat:mod_cluster:1.3.1

CVE-2015-0298

2015-08-24T10:59:02.587-04:00

2015-08-25T14:05:56.953-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-08-25T11:00:17.450-04:00

REDHAT RHSA-2015:1641 REDHAT RHSA-2015:1642 CONFIRM https://issues.jboss.org/browse/MODCLUSTER-453 Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.

cpe:/a:open_source_point_of_sale_project:open_source_point_of_sale:2.3.1

CVE-2015-0299

2015-09-29T15:59:00.107-04:00

2015-09-30T12:14:52.337-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-30T07:09:50.970-04:00

MISC http://packetstormsecurity.com/files/133737/Open-Source-Point-Of-Sale-2.3.1-Cross-Site-Scripting.html Multiple cross-site scripting (XSS) vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:adobe:adobe_air:15.0.0.356 cpe:/a:adobe:adobe_air:15.0.0.356::~~~android~~ cpe:/a:adobe:adobe_air_sdk:15.0.0.356 cpe:/a:adobe:adobe_air_sdk_and_compiler:15.0.0.356 cpe:/a:adobe:flash_player:11.2.202.425 cpe:/a:adobe:flash_player:13.0.0.259 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.144 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.238 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.234 cpe:/a:adobe:flash_player:16.0.0.235

CVE-2015-0301

2015-01-13T18:59:00.053-05:00

2017-09-07T21:29:38.607-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72034 SECTRACK 1031525 XF adobe-cve20150301-unspecified(99981) Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.

CVE-2015-0302

2015-01-13T18:59:01.320-05:00

2017-09-07T21:29:38.700-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72035 SECTRACK 1031525 XF adobe-cve20150302-info-disc(99982) Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.

CVE-2015-0303

2015-01-13T18:59:02.460-05:00

2017-09-07T21:29:38.777-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72031 SECTRACK 1031525 XF adobe-cve20150303-code-exec(99983) Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.

CVE-2015-0304

2015-01-13T18:59:03.397-05:00

2017-09-07T21:29:38.840-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72032 SECTRACK 1031525 XF adobe-cve20150304-bo(99985) IDEFENSE 20141016 Adobe Flash Player Sound Object "loadCompressedDataFromByteArray" Heap Overflow Vulnerability Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.

CVE-2015-0305

2015-01-13T18:59:04.397-05:00

2017-09-07T21:29:38.917-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72033 SECTRACK 1031525 XF adobe-cve20150305-code-exec(99987) Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."

CVE-2015-0306

2015-01-13T18:59:05.227-05:00

2017-09-07T21:29:38.997-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72036 SECTRACK 1031525 XF adobe-cve20150306-code-exec(99984) Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.

CVE-2015-0307

2015-01-13T18:59:06.070-05:00

2017-09-07T21:29:39.077-04:00

8.5

NETWORK

LOW

NONE

PARTIAL

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72037 SECTRACK 1031525 XF adobe-cve20150307-info-disc(99988) Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

CVE-2015-0308

2015-01-13T18:59:06.977-05:00

2017-09-07T21:29:39.183-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72039 SECTRACK 1031525 XF adobe-cve20150308-code-exec(99989) Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.

CVE-2015-0309

2015-01-13T18:59:07.883-05:00

2017-09-07T21:29:39.263-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-01.html SECUNIA 62177 SECUNIA 62187 GENTOO GLSA-201502-02 BID 72038 SECTRACK 1031525 XF adobe-cve20150309-bo(99986) Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.

cpe:/a:adobe:flash_player:11.2.202.429 cpe:/a:adobe:flash_player:13.0.0.260 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.235 cpe:/a:adobe:flash_player:16.0.0.257

CVE-2015-0310

2015-01-23T16:59:00.050-05:00

2015-11-13T12:08:35.050-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-11-13T11:11:15.757-05:00

CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-02.html GENTOO GLSA-201502-02 BID 72261 SECTRACK 1031609 Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

cpe:/a:adobe:flash_player:11.2.202.438 cpe:/a:adobe:flash_player:13.0.0.262 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.235 cpe:/a:adobe:flash_player:16.0.0.257 cpe:/a:adobe:flash_player:16.0.0.287

CVE-2015-0311

2015-01-23T16:59:04.897-05:00

2015-02-13T22:00:01.597-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsa15-01.html CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-03.html SUSE SUSE-SU-2015:0151 SUSE SUSE-SU-2015:0163 MISC http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html GENTOO GLSA-201502-02 BID 72283 SECTRACK 1031597 CONFIRM https://technet.microsoft.com/library/security/2755801 Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

cpe:/a:adobe:flash_player:11.0 cpe:/a:adobe:flash_player:11.0.1.152 cpe:/a:adobe:flash_player:11.0.1.152::~~~~x64~ cpe:/a:adobe:flash_player:11.0.1.153 cpe:/a:adobe:flash_player:11.1 cpe:/a:adobe:flash_player:11.1.102.55 cpe:/a:adobe:flash_player:11.1.102.55::~~~~x64~ cpe:/a:adobe:flash_player:11.1.102.59 cpe:/a:adobe:flash_player:11.1.102.62 cpe:/a:adobe:flash_player:11.1.102.63 cpe:/a:adobe:flash_player:11.1.111.8 cpe:/a:adobe:flash_player:11.1.111.44 cpe:/a:adobe:flash_player:11.1.111.50 cpe:/a:adobe:flash_player:11.1.111.54 cpe:/a:adobe:flash_player:11.1.111.64 cpe:/a:adobe:flash_player:11.1.111.73 cpe:/a:adobe:flash_player:11.1.115.7 cpe:/a:adobe:flash_player:11.1.115.34 cpe:/a:adobe:flash_player:11.1.115.48 cpe:/a:adobe:flash_player:11.1.115.54 cpe:/a:adobe:flash_player:11.1.115.58 cpe:/a:adobe:flash_player:11.1.115.59 cpe:/a:adobe:flash_player:11.1.115.63 cpe:/a:adobe:flash_player:11.1.115.69 cpe:/a:adobe:flash_player:11.1.115.81 cpe:/a:adobe:flash_player:11.2.202.223 cpe:/a:adobe:flash_player:11.2.202.228 cpe:/a:adobe:flash_player:11.2.202.233 cpe:/a:adobe:flash_player:11.2.202.235 cpe:/a:adobe:flash_player:11.2.202.236 cpe:/a:adobe:flash_player:11.2.202.238 cpe:/a:adobe:flash_player:11.2.202.243 cpe:/a:adobe:flash_player:11.2.202.251 cpe:/a:adobe:flash_player:11.2.202.258 cpe:/a:adobe:flash_player:11.2.202.261 cpe:/a:adobe:flash_player:11.2.202.262 cpe:/a:adobe:flash_player:11.2.202.270 cpe:/a:adobe:flash_player:11.2.202.273 cpe:/a:adobe:flash_player:11.2.202.275 cpe:/a:adobe:flash_player:11.2.202.280 cpe:/a:adobe:flash_player:11.2.202.285 cpe:/a:adobe:flash_player:11.2.202.291 cpe:/a:adobe:flash_player:11.2.202.297 cpe:/a:adobe:flash_player:11.2.202.310 cpe:/a:adobe:flash_player:11.2.202.327 cpe:/a:adobe:flash_player:11.2.202.332 cpe:/a:adobe:flash_player:11.2.202.335 cpe:/a:adobe:flash_player:11.2.202.336 cpe:/a:adobe:flash_player:11.2.202.341 cpe:/a:adobe:flash_player:11.2.202.346 cpe:/a:adobe:flash_player:11.2.202.350 cpe:/a:adobe:flash_player:11.2.202.356 cpe:/a:adobe:flash_player:11.2.202.359 cpe:/a:adobe:flash_player:11.2.202.378 cpe:/a:adobe:flash_player:11.2.202.394 cpe:/a:adobe:flash_player:11.2.202.429 cpe:/a:adobe:flash_player:11.2.202.438 cpe:/a:adobe:flash_player:13.0.0.182 cpe:/a:adobe:flash_player:13.0.0.201 cpe:/a:adobe:flash_player:13.0.0.206 cpe:/a:adobe:flash_player:13.0.0.214 cpe:/a:adobe:flash_player:13.0.0.223 cpe:/a:adobe:flash_player:13.0.0.231 cpe:/a:adobe:flash_player:13.0.0.260 cpe:/a:adobe:flash_player:13.0.0.262 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.144 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.238 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.234 cpe:/a:adobe:flash_player:16.0.0.235 cpe:/a:adobe:flash_player:16.0.0.257 cpe:/a:adobe:flash_player:16.0.0.287 cpe:/o:apple:mac_os_x cpe:/o:linux:linux_kernel cpe:/o:microsoft:windows

CVE-2015-0312

2015-01-28T17:59:01.937-05:00

2017-09-07T21:29:39.340-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://helpx.adobe.com/security/products/flash-player/apsb15-03.html BID 72343 SECTRACK 1031634 XF adobe-flash-cve20150312-code-exec(100394) CONFIRM https://technet.microsoft.com/library/security/2755801 Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.

cpe:/a:adobe:flash_player:11.2.202.440 cpe:/a:adobe:flash_player:13.0.0.264 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.235 cpe:/a:adobe:flash_player:16.0.0.257 cpe:/a:adobe:flash_player:16.0.0.287 cpe:/a:adobe:flash_player:16.0.0.296

CVE-2015-0313

2015-02-02T14:59:00.053-05:00

2017-09-07T21:29:39.403-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 MISC http://packetstormsecurity.com/files/131189/Adobe-Flash-Player-ByteArray-With-Workers-Use-After-Free.html OSVDB 117853 BID 72429 SECTRACK 1031686 XF adobe-flash-cve20150313-code-exec(100641) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsa15-02.html CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 EXPLOIT-DB 36579 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

CVE-2015-0314

2015-02-05T19:59:00.060-05:00

2017-09-07T21:29:39.513-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150314-code-exec(100700) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

CVE-2015-0315

2015-02-05T19:59:01.373-05:00

2017-09-07T21:29:39.577-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150315-code-exec(100697) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.

CVE-2015-0316

2015-02-05T19:59:02.387-05:00

2017-09-07T21:29:39.637-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150316-code-exec(100701) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

CVE-2015-0317

2015-02-05T19:59:03.200-05:00

2017-09-07T21:29:39.717-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150317-code-exec(100706) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0319.

CVE-2015-0318

2015-02-05T19:59:03.950-05:00

2017-09-07T21:29:39.777-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150318-code-exec(100702) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

CVE-2015-0319

2015-02-05T19:59:04.873-05:00

2017-09-07T21:29:39.857-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150319-code-exec(100707) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0317.

CVE-2015-0320

2015-02-05T19:59:05.733-05:00

2017-09-07T21:29:39.920-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150320-code-exec(100698) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322.

CVE-2015-0321

2015-02-05T19:59:06.717-05:00

2017-09-07T21:29:39.997-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150321-code-exec(100703) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.

CVE-2015-0322

2015-02-05T19:59:07.670-05:00

2017-09-07T21:29:40.060-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150322-code-exec(100699) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.

CVE-2015-0323

2015-02-05T19:59:08.513-05:00

2017-09-07T21:29:40.137-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150323-bo(100708) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.

CVE-2015-0324

2015-02-05T19:59:09.327-05:00

2017-09-07T21:29:40.217-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150324-bo(100710) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVE-2015-0325

2015-02-05T19:59:10.233-05:00

2017-09-07T21:29:40.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150325-dos(100711) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.

CVE-2015-0326

2015-02-05T19:59:11.263-05:00

2017-09-07T21:29:40.357-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150326-dos(100712) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328.

CVE-2015-0327

2015-02-05T19:59:12.123-05:00

2017-09-07T21:29:40.420-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150327-bo(100709) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.

CVE-2015-0328

2015-02-05T19:59:12.997-05:00

2017-09-07T21:29:40.480-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150328-dos(100713) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0326.

CVE-2015-0329

2015-02-05T19:59:13.903-05:00

2017-09-07T21:29:40.560-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150329-code-exec(100704) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0330.

CVE-2015-0330

2015-02-05T19:59:14.733-05:00

2017-09-07T21:29:40.637-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0236 SUSE openSUSE-SU-2015:0237 SUSE openSUSE-SU-2015:0238 SUSE SUSE-SU-2015:0239 REDHAT RHSA-2015:0140 GENTOO GLSA-201502-02 BID 72514 SECTRACK 1031706 XF adobe-flash-cve20150330-code-exec(100705) CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html CONFIRM https://technet.microsoft.com/library/security/2755801 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0321, and CVE-2015-0329.

CVE-2015-0331

2015-02-21T06:59:00.060-05:00

2017-01-02T21:59:31.440-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0725 BID 72698 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-04.html Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

cpe:/a:adobe:flash_player:11.2.202.442 cpe:/a:adobe:flash_player:13.0.0.264 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.235 cpe:/a:adobe:flash_player:16.0.0.257 cpe:/a:adobe:flash_player:16.0.0.287 cpe:/a:adobe:flash_player:16.0.0.296 cpe:/a:adobe:flash_player:16.0.0.305

CVE-2015-0332

2015-03-13T13:59:00.067-04:00

2017-06-30T21:29:12.077-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.

CVE-2015-0333

2015-03-13T13:59:01.207-04:00

2017-06-30T21:29:12.157-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.

CVE-2015-0334

2015-03-13T13:59:02.287-04:00

2017-06-30T21:29:12.233-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0336.

CVE-2015-0335

2015-03-13T13:59:03.287-04:00

2017-06-30T21:29:12.297-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

CVE-2015-0336

2015-03-13T13:59:04.083-04:00

2017-06-30T21:29:12.343-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 BID 73084 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 EXPLOIT-DB 36962 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0334.

CVE-2015-0337

2015-03-13T13:59:05.003-04:00

2017-06-30T21:29:12.407-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

CVE-2015-0338

2015-03-13T13:59:06.067-04:00

2017-06-30T21:29:12.483-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVE-2015-0339

2015-03-13T13:59:06.973-04:00

2017-06-30T21:29:12.547-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

CVE-2015-0340

2015-03-13T13:59:08.020-04:00

2017-06-30T21:29:12.607-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.

CVE-2015-0341

2015-03-13T13:59:08.927-04:00

2017-06-30T21:29:12.670-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0342.

CVE-2015-0342

2015-03-13T13:59:09.893-04:00

2017-06-30T21:29:12.733-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0490 SUSE SUSE-SU-2015:0491 SUSE SUSE-SU-2015:0493 SUSE openSUSE-SU-2015:0496 REDHAT RHSA-2015:0697 SECTRACK 1031922 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-05.html GENTOO GLSA-201503-09 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.

cpe:/a:adobe:connect:9.3

CVE-2015-0343

2015-06-13T11:59:00.073-04:00

2016-12-30T21:59:16.797-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/132269/Adobe-Connect-9.3-Cross-Site-Scripting.html BUGTRAQ 20150611 XSS vulnerability Adobe Connect 9.3 (CVE-2015-0343 ) FULLDISC 20150611 XSS vulnerability Adobe Connect 9.3 (CVE-2015-0343 ) SECTRACK 1032567 CONFIRM https://helpx.adobe.com/adobe-connect/release-note/connect-94-release-notes.html#Issues%20Resolved Cross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.

cpe:/a:adobe:connect:9.3

CVE-2015-0344

2015-06-13T11:59:01.450-04:00

2016-12-30T21:59:16.843-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1032567 CONFIRM https://helpx.adobe.com/adobe-connect/release-note/connect-94-release-notes.html#Issues%20Resolved Cross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:adobe:coldfusion:10.0:update_15 cpe:/a:adobe:coldfusion:11.0:update_4

CVE-2015-0345

2015-04-15T06:59:00.080-04:00

2017-01-02T21:59:31.567-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1032106 CONFIRM https://helpx.adobe.com/security/products/coldfusion/apsb15-07.html Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:adobe:flash_player:11.2.202.451 cpe:/a:adobe:flash_player:13.0.0.264 cpe:/a:adobe:flash_player:14.0.0.125 cpe:/a:adobe:flash_player:14.0.0.145 cpe:/a:adobe:flash_player:14.0.0.176 cpe:/a:adobe:flash_player:14.0.0.179 cpe:/a:adobe:flash_player:15.0.0.152 cpe:/a:adobe:flash_player:15.0.0.167 cpe:/a:adobe:flash_player:15.0.0.189 cpe:/a:adobe:flash_player:15.0.0.223 cpe:/a:adobe:flash_player:15.0.0.239 cpe:/a:adobe:flash_player:15.0.0.246 cpe:/a:adobe:flash_player:16.0.0.235 cpe:/a:adobe:flash_player:16.0.0.257 cpe:/a:adobe:flash_player:16.0.0.287 cpe:/a:adobe:flash_player:16.0.0.296 cpe:/a:adobe:flash_player:17.0.0.134 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2 cpe:/o:redhat:enterprise_linux_desktop_supplementary:5.0 cpe:/o:redhat:enterprise_linux_desktop_supplementary:6.0 cpe:/o:redhat:enterprise_linux_server_supplementary:5.0 cpe:/o:redhat:enterprise_linux_server_supplementary:6.0 cpe:/o:redhat:enterprise_linux_server_supplementary_eus:6.6.z cpe:/o:redhat:enterprise_linux_workstation_supplementary:6.0 cpe:/o:suse:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:suse:suse_linux_enterprise_desktop:12.0 cpe:/o:suse:suse_linux_workstation_extension:12.0

CVE-2015-0346

2015-04-14T18:59:00.067-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74067 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.

CVE-2015-0347

2015-04-14T18:59:01.363-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVE-2015-0348

2015-04-14T18:59:02.350-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVE-2015-0349

2015-04-14T18:59:03.537-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74064 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.

CVE-2015-0350

2015-04-14T18:59:04.427-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVE-2015-0351

2015-04-14T18:59:05.397-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

CVE-2015-0352

2015-04-14T18:59:06.273-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVE-2015-0353

2015-04-14T18:59:07.257-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVE-2015-0354

2015-04-14T18:59:08.117-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVE-2015-0355

2015-04-14T18:59:08.960-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVE-2015-0356

2015-04-14T18:59:10.037-04:00

2017-01-02T21:59:32.533-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."

CVE-2015-0357

2015-04-14T18:59:10.897-04:00

2017-01-02T21:59:32.613-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.

CVE-2015-0358

2015-04-14T18:59:11.803-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

CVE-2015-0359

2015-04-14T18:59:12.680-04:00

2017-10-06T21:29:00.507-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

CVE-2015-0360

2015-04-14T18:59:13.477-04:00

2018-10-30T12:27:37.467-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0718 SUSE SUSE-SU-2015:0722 SUSE SUSE-SU-2015:0723 SUSE openSUSE-SU-2015:0725 REDHAT RHSA-2015:0813 BID 74062 SECTRACK 1032105 CONFIRM https://helpx.adobe.com/security/products/flash-player/apsb15-06.html GENTOO GLSA-201504-07 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2 cpe:/o:xen:xen:4.2.0 cpe:/o:xen:xen:4.2.1 cpe:/o:xen:xen:4.2.2 cpe:/o:xen:xen:4.2.3 cpe:/o:xen:xen:4.2.4 cpe:/o:xen:xen:4.2.5 cpe:/o:xen:xen:4.3.0 cpe:/o:xen:xen:4.3.1 cpe:/o:xen:xen:4.3.2 cpe:/o:xen:xen:4.3.3 cpe:/o:xen:xen:4.4.0 cpe:/o:xen:xen:4.4.1

CVE-2015-0361

2015-01-07T14:59:05.107-05:00

2018-10-30T12:27:35.843-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov FEDORA FEDORA-2015-0331 FEDORA FEDORA-2015-0345 SUSE openSUSE-SU-2015:0226 SUSE openSUSE-SU-2015:0256 BID 71882 SECTRACK 1031498 CONFIRM http://xenbits.xen.org/xsa/advisory-116.html GENTOO GLSA-201504-04 Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted hypercall during HVM guest teardown.

cpe:/a:oracle:fusion_middleware:11.1.1.7.0

CVE-2015-0362

2015-01-21T13:59:10.543-05:00

2017-09-07T21:29:40.683-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72170 XF oracle-cpujan2015-cve20150362(100076) Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to BI Publisher Security.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0363

2015-01-21T13:59:11.513-05:00

2017-09-07T21:29:40.730-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72203 SECTRACK 1031578 XF oracle-cpujan2015-cve20150363(100128) Unspecified vulnerability in the Siebel Core EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Integration Business Services.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0364

2015-01-21T13:59:12.467-05:00

2017-09-07T21:29:40.793-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72218 SECTRACK 1031578 XF oracle-cpujan2015-cve20150364(100133) Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Integration Business Services.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0365

2015-01-21T13:59:13.373-05:00

2017-09-07T21:29:40.840-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72190 SECTRACK 1031578 XF oracle-cpujan2015-cve20150365(100122) Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Security.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0366

2015-01-21T13:59:14.200-05:00

2017-09-07T21:29:40.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72180 SECTRACK 1031578 XF oracle-cpujan2015-cve20150366(100118) Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Java Integration, a different vulnerability than CVE-2014-0369.

cpe:/a:oracle:fusion_middleware:11.1.1.5.0 cpe:/a:oracle:fusion_middleware:11.1.1.7.0 cpe:/a:oracle:fusion_middleware:11.1.2.1.0 cpe:/a:oracle:fusion_middleware:11.1.2.2.0

CVE-2015-0367

2015-01-21T13:59:14.967-05:00

2017-09-07T21:29:40.950-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72179 XF oracle-cpujan2015-cve20150367(100077) Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via vectors related to SSO Engine.

cpe:/a:oracle:supply_chain_products_suite:6.1.0 cpe:/a:oracle:supply_chain_products_suite:6.2.0 cpe:/a:oracle:supply_chain_products_suite:6.3.0 cpe:/a:oracle:supply_chain_products_suite:6.3.1 cpe:/a:oracle:supply_chain_products_suite:6.3.2 cpe:/a:oracle:supply_chain_products_suite:6.3.3 cpe:/a:oracle:supply_chain_products_suite:6.3.4 cpe:/a:oracle:supply_chain_products_suite:6.3.5

CVE-2015-0368

2015-01-21T13:59:15.747-05:00

2017-09-07T21:29:41.013-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72123 SECTRACK 1031576 XF oracle-cpujan2015-cve20150368(100105) Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect availability via unknown vectors related to Security.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0369

2015-01-21T13:59:16.670-05:00

2017-09-07T21:29:41.060-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72192 SECTRACK 1031578 XF oracle-cpujan2015-cve20150369(100123) Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to AX/HI Web UI.

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1

CVE-2015-0370

2015-01-21T13:59:17.420-05:00

2017-09-07T21:29:41.107-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72171 SECTRACK 1031572 XF oracle-cpujan2015-cve20150370(100072) Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2013-5858.

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1

CVE-2015-0371

2015-01-21T13:59:18.403-05:00

2017-09-07T21:29:41.170-04:00

4.9

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72163 SECTRACK 1031572 XF oracle-cpujan2015-cve20150371(100070) Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity and availability via unknown vectors.

cpe:/a:oracle:fusion_middleware:10.1.3.5

CVE-2015-0372

2015-01-21T13:59:19.233-05:00

2017-09-07T21:29:41.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72183 XF oracle-cpujan2015-cve20150372(100078) Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors.

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1 cpe:/a:oracle:database_server:12.1.0.2

CVE-2015-0373

2015-01-21T13:59:20.217-05:00

2017-09-07T21:29:41.263-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72145 SECTRACK 1031572 XF oracle-cpujan2015-cve20150373(100067) Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:fedoraproject:fedora:20 cpe:/o:oracle:solaris:11.3 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0374

2015-01-21T13:59:21.123-05:00

2019-02-01T13:04:03.920-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2019-01-30T12:41:57.917-05:00

FEDORA FEDORA-2015-1162 SUSE SUSE-SU-2015:0743 REDHAT RHSA-2015:0116 REDHAT RHSA-2015:0117 REDHAT RHSA-2015:0118 REDHAT RHSA-2015:1628 DEBIAN DSA-3135 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72227 SECTRACK 1031581 UBUNTU USN-2480-1 XF oracle-cpujan2015-cve20150374(100191) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key.

cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.11

CVE-2015-0375

2015-01-21T13:59:21.967-05:00

2017-09-07T21:29:41.387-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72153 SECTRACK 1031583 XF oracle-cpujan2015-cve20150375(100164) Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown vectors related to Network.

cpe:/a:oracle:fusion_middleware:11.1.1.8.0

CVE-2015-0376

2015-01-21T13:59:22.840-05:00

2016-06-29T11:06:57.297-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-06-29T09:41:46.563-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72189 Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Content Server.

cpe:/a:oracle:vm_virtualbox:3.2.0 cpe:/a:oracle:vm_virtualbox:3.2.2 cpe:/a:oracle:vm_virtualbox:3.2.4 cpe:/a:oracle:vm_virtualbox:3.2.6 cpe:/a:oracle:vm_virtualbox:3.2.8 cpe:/a:oracle:vm_virtualbox:3.2.10 cpe:/a:oracle:vm_virtualbox:3.2.12 cpe:/a:oracle:vm_virtualbox:3.2.14 cpe:/a:oracle:vm_virtualbox:3.2.16 cpe:/a:oracle:vm_virtualbox:3.2.18 cpe:/a:oracle:vm_virtualbox:3.2.20 cpe:/a:oracle:vm_virtualbox:3.2.22 cpe:/a:oracle:vm_virtualbox:3.2.24 cpe:/a:oracle:vm_virtualbox:4.0.0 cpe:/a:oracle:vm_virtualbox:4.0.2 cpe:/a:oracle:vm_virtualbox:4.0.4 cpe:/a:oracle:vm_virtualbox:4.0.6 cpe:/a:oracle:vm_virtualbox:4.0.8 cpe:/a:oracle:vm_virtualbox:4.0.10 cpe:/a:oracle:vm_virtualbox:4.0.12 cpe:/a:oracle:vm_virtualbox:4.0.14 cpe:/a:oracle:vm_virtualbox:4.0.16 cpe:/a:oracle:vm_virtualbox:4.0.18 cpe:/a:oracle:vm_virtualbox:4.0.20 cpe:/a:oracle:vm_virtualbox:4.0.22 cpe:/a:oracle:vm_virtualbox:4.0.24 cpe:/a:oracle:vm_virtualbox:4.0.26 cpe:/a:oracle:vm_virtualbox:4.1.0 cpe:/a:oracle:vm_virtualbox:4.1.2 cpe:/a:oracle:vm_virtualbox:4.1.4 cpe:/a:oracle:vm_virtualbox:4.1.6 cpe:/a:oracle:vm_virtualbox:4.1.8 cpe:/a:oracle:vm_virtualbox:4.1.10 cpe:/a:oracle:vm_virtualbox:4.1.12 cpe:/a:oracle:vm_virtualbox:4.1.14 cpe:/a:oracle:vm_virtualbox:4.1.16 cpe:/a:oracle:vm_virtualbox:4.1.18 cpe:/a:oracle:vm_virtualbox:4.1.20 cpe:/a:oracle:vm_virtualbox:4.1.22 cpe:/a:oracle:vm_virtualbox:4.1.24 cpe:/a:oracle:vm_virtualbox:4.1.26 cpe:/a:oracle:vm_virtualbox:4.1.28 cpe:/a:oracle:vm_virtualbox:4.1.30 cpe:/a:oracle:vm_virtualbox:4.1.32 cpe:/a:oracle:vm_virtualbox:4.1.34 cpe:/a:oracle:vm_virtualbox:4.2.0 cpe:/a:oracle:vm_virtualbox:4.2.2 cpe:/a:oracle:vm_virtualbox:4.2.4 cpe:/a:oracle:vm_virtualbox:4.2.6 cpe:/a:oracle:vm_virtualbox:4.2.8 cpe:/a:oracle:vm_virtualbox:4.2.10 cpe:/a:oracle:vm_virtualbox:4.2.12 cpe:/a:oracle:vm_virtualbox:4.2.14 cpe:/a:oracle:vm_virtualbox:4.2.16 cpe:/a:oracle:vm_virtualbox:4.2.18 cpe:/a:oracle:vm_virtualbox:4.2.20 cpe:/a:oracle:vm_virtualbox:4.2.22 cpe:/a:oracle:vm_virtualbox:4.2.24 cpe:/a:oracle:vm_virtualbox:4.2.26 cpe:/o:debian:debian_linux:7.0 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0377

2015-01-21T13:59:23.687-05:00

2018-10-30T12:27:35.843-04:00

4.4

LOCAL

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0229 MISC http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf DEBIAN DSA-3143 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72219 XF oracle-cpujan2015-cve20150377(100176) GENTOO GLSA-201612-27 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418.

cpe:/o:oracle:solaris:11

CVE-2015-0378

2015-01-21T13:59:24.543-05:00

2017-09-07T21:29:41.513-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72147 SECTRACK 1031583 XF oracle-cpujan2015-cve20150378(100174) Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Libc.

cpe:/a:oracle:peoplesoft_products:8.54

CVE-2015-0379

2015-01-21T13:59:25.373-05:00

2017-09-07T21:29:41.590-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72244 SECTRACK 1031577 XF oracle-cpujan2015-cve20150379(100111) Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 allows remote attackers to affect integrity via vectors related to PIA Core Technology.

cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.4 cpe:/a:oracle:e-business_suite:12.0.5 cpe:/a:oracle:e-business_suite:12.0.6 cpe:/a:oracle:e-business_suite:12.1.1 cpe:/a:oracle:e-business_suite:12.1.2 cpe:/a:oracle:e-business_suite:12.1.3 cpe:/a:oracle:e-business_suite:12.2.2 cpe:/a:oracle:e-business_suite:12.2.3 cpe:/a:oracle:e-business_suite:12.2.4

CVE-2015-0380

2015-01-21T13:59:26.170-05:00

2017-09-07T21:29:41.653-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72236 SECTRACK 1031579 XF oracle-cpujan2015-cve20150380(100101) Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Summary.

cpe:/a:oracle:communications_policy_management:9.7.3 cpe:/a:oracle:communications_policy_management:9.9.1 cpe:/a:oracle:communications_policy_management:10.4.1 cpe:/a:oracle:communications_policy_management:12.1.1 cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:fedoraproject:fedora:20 cpe:/o:oracle:solaris:11.3 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0381

2015-01-21T13:59:26.950-05:00

2019-02-01T13:02:00.180-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T12:46:37.513-05:00

FEDORA FEDORA-2015-1162 SUSE SUSE-SU-2015:0743 REDHAT RHSA-2015:0116 REDHAT RHSA-2015:0117 REDHAT RHSA-2015:0118 REDHAT RHSA-2015:1628 DEBIAN DSA-3135 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72214 SECTRACK 1031581 UBUNTU USN-2480-1 XF oracle-cpujan2015-cve20150381(100185) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382.

CVE-2015-0382

2015-01-21T13:59:27.763-05:00

2019-02-01T12:58:57.533-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T12:51:06.940-05:00

FEDORA FEDORA-2015-1162 SUSE SUSE-SU-2015:0743 REDHAT RHSA-2015:0116 REDHAT RHSA-2015:0117 REDHAT RHSA-2015:0118 REDHAT RHSA-2015:1628 DEBIAN DSA-3135 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72200 SECTRACK 1031581 UBUNTU USN-2480-1 XF oracle-cpujan2015-cve20150382(100184) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.

cpe:/a:oracle:jdk:1.5.0:update_75 cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_71 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jdk:1.8.0:update_6 cpe:/a:oracle:jre:1.5.0:update_75 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_71 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/a:oracle:jre:1.8.0:update_6 cpe:/a:oracle:jrockit:r27.8.4 cpe:/a:oracle:jrockit:r28.3.4 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21 cpe:/o:fedoraproject:fedora:22 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:12.0 cpe:/o:opensuse:opensuse:13.2 cpe:/o:redhat:enterprise_linux:5 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0383

2015-01-21T13:59:28.467-05:00

2019-04-22T13:48:00.643-04:00

5.4

LOCAL

MEDIUM

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov HP HPSBUX03281 FEDORA FEDORA-2015-8264 FEDORA FEDORA-2015-8226 FEDORA FEDORA-2015-8251 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0068 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0085 REDHAT RHSA-2015:0086 DEBIAN DSA-3144 DEBIAN DSA-3147 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72155 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150383(100148) GENTOO GLSA-201507-14 GENTOO GLSA-201603-14 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0384

2015-01-21T13:59:29.230-05:00

2017-09-07T21:29:41.950-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72221 SECTRACK 1031578 XF oracle-cpujan2015-cve20150384(100134) Unspecified vulnerability in the Siebel Public Sector component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to Public Sector Portal.

cpe:/a:oracle:mysql:5.6.21

CVE-2015-0385

2015-01-21T13:59:30.137-05:00

2017-09-07T21:29:41.997-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72229 SECTRACK 1031581 XF oracle-cpujan2015-cve20150385(100190) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Pluggable Auth.

cpe:/a:oracle:fusion_middleware:11.1.1.7.0 cpe:/a:oracle:fusion_middleware:12.1.2.0.0 cpe:/a:oracle:fusion_middleware:12.1.3.0.0

CVE-2015-0386

2015-01-21T13:59:30.920-05:00

2016-06-23T13:54:55.607-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2016-06-23T13:46:57.553-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72193 Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2013-0338, CVE-2013-2877, and CVE-2014-0191.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0387

2015-01-21T13:59:31.687-05:00

2017-09-07T21:29:42.060-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72198 SECTRACK 1031578 XF oracle-cpujan2015-cve20150387(100126) Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via vectors related to Security - LDAP Security Adapter.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0388

2015-01-21T13:59:32.527-05:00

2017-09-07T21:29:42.123-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72209 SECTRACK 1031578 XF oracle-cpujan2015-cve20150388(100130) Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0417.

cpe:/a:oracle:fusion_middleware:8.0:update2_patch5

CVE-2015-0389

2015-01-21T13:59:33.480-05:00

2016-06-23T13:55:24.513-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-06-23T13:48:31.587-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72199 Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via vectors related to SAML, a different vulnerability than CVE-2014-6592.

cpe:/a:oracle:retail_applications_xstore:3.2.1 cpe:/a:oracle:retail_applications_xstore:3.4.2 cpe:/a:oracle:retail_applications_xstore:3.5.0 cpe:/a:oracle:retail_applications_xstore:4.0.1 cpe:/a:oracle:retail_applications_xstore:4.5.1 cpe:/a:oracle:retail_applications_xstore:4.8.0 cpe:/a:oracle:retail_applications_xstore:5.0.3 cpe:/a:oracle:retail_applications_xstore:5.5.3 cpe:/a:oracle:retail_applications_xstore:6.0.6 cpe:/a:oracle:retail_applications_xstore:6.5.2

CVE-2015-0390

2015-01-21T13:59:34.387-05:00

2017-09-07T21:29:42.183-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72247 SECTRACK 1031591 XF oracle-cpujan2015-cve20150390(100138) Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sale.

cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0391

2015-01-21T13:59:35.183-05:00

2019-02-01T12:58:19.593-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T12:56:06.263-05:00

SUSE SUSE-SU-2015:0743 REDHAT RHSA-2015:0116 REDHAT RHSA-2015:0117 REDHAT RHSA-2015:0118 REDHAT RHSA-2015:1628 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72205 SECTRACK 1031581 XF oracle-cpujan2015-cve20150391(100186) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0392

2015-01-21T13:59:36.137-05:00

2017-09-07T21:29:42.310-04:00

4.6

NETWORK

HIGH

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72182 SECTRACK 1031578 XF oracle-cpujan2015-cve20150392(100119) Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Config - Scripting.

cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.6 cpe:/a:oracle:e-business_suite:12.1.3 cpe:/a:oracle:e-business_suite:12.2.2 cpe:/a:oracle:e-business_suite:12.2.3 cpe:/a:oracle:e-business_suite:12.2.4

CVE-2015-0393

2015-01-21T13:59:36.933-05:00

2017-09-07T21:29:42.373-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov MISC http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdf CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72230 SECTRACK 1031579 XF oracle-cpujan2015-cve20150393(100097) Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that the PUBLIC role is granted the INDEX privilege for the DUAL table during a "seeded install," which allows remote authenticated users to gain SYSDBA privileges and execute arbitrary code.

cpe:/a:oracle:peoplesoft_products:8.52 cpe:/a:oracle:peoplesoft_products:8.53

CVE-2015-0394

2015-01-21T13:59:38.137-05:00

2017-09-07T21:29:42.433-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72246 SECTRACK 1031577 XF oracle-cpujan2015-cve20150394(100115) Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote authenticated users to affect confidentiality via unknown vectors related to Report Distribution.

cpe:/a:oracle:jdk:1.5.0:update_75 cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.5.0:update_75 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:12.0 cpe:/o:opensuse:opensuse:13.2 cpe:/o:redhat:enterprise_linux:5 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0395

2015-01-21T13:59:38.903-05:00

2019-04-22T13:48:00.643-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP HPSBUX03281 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0068 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0085 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0136 REDHAT RHSA-2015:0264 DEBIAN DSA-3144 DEBIAN DSA-3147 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72142 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150395(100143) GENTOO GLSA-201507-14 GENTOO GLSA-201603-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

cpe:/a:oracle:fusion_middleware:3.0.1 cpe:/a:oracle:fusion_middleware:3.1.2

CVE-2015-0396

2015-01-21T13:59:39.637-05:00

2017-09-07T21:29:42.560-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECUNIA 62480 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72121 SECTRACK 1031570 XF oracle-cpujan2015-cve20150396(100073) Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console.

cpe:/o:sun:sunos:5.11

CVE-2015-0397

2015-01-21T13:59:40.387-05:00

2017-09-07T21:29:42.623-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72164 SECTRACK 1031583 XF oracle-cpujan2015-cve20150397(100173) Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different vulnerability than CVE-2014-6570 and CVE-2014-6600.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0398

2015-01-21T13:59:41.170-05:00

2017-09-07T21:29:42.683-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72207 SECTRACK 1031578 XF oracle-cpujan2015-cve20150398(100129) Unspecified vulnerability in the Siebel Life Sciences component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Clinical Trip Report.

cpe:/a:oracle:fusion_middleware:10.1.3.4.2 cpe:/a:oracle:fusion_middleware:11.1.1.7.0

CVE-2015-0399

2015-01-21T13:59:41.920-05:00

2017-01-02T21:59:33.817-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov SECUNIA 62475 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72204 Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General.

cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:novell:suse_linux_enterprise_desktop:12.0 cpe:/o:novell:suse_linux_enterprise_server:12.0 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0400

2015-01-21T13:59:42.747-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov HP HPSBUX03281 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72159 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150400(100149) GENTOO GLSA-201507-14 GENTOO GLSA-201603-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

cpe:/a:oracle:fusion_middleware:7.0 cpe:/a:oracle:fusion_middleware:11.1.1.7.0

CVE-2015-0401

2015-01-21T13:59:43.577-05:00

2017-01-02T21:59:33.957-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72212 Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0402

2015-01-21T13:59:44.577-05:00

2017-09-07T21:29:42.810-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72187 SECTRACK 1031578 XF oracle-cpujan2015-cve20150402(100121) Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via vectors related to Integration - COM.

CVE-2015-0403

2015-01-21T13:59:45.387-05:00

2017-09-07T21:29:42.873-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov HP HPSBUX03281 SUSE SUSE-SU-2015:0336 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0264 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72148 SECTRACK 1031580 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150403(100145) GENTOO GLSA-201507-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVE-2015-0404

2015-01-21T13:59:46.137-05:00

2017-09-07T21:29:42.920-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72224 SECTRACK 1031579 XF oracle-cpujan2015-cve20150404(100100) Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages.

cpe:/a:oracle:mysql:5.6.22 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3:~~vmware~~~ cpe:/o:novell:suse_linux_enterprise_software_development_kit:11.0:sp3

CVE-2015-0405

2015-04-16T12:59:00.077-04:00

2017-01-02T21:59:34.160-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA.

CVE-2015-0406

2015-01-21T13:59:46.950-05:00

2017-09-07T21:29:42.980-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov HP HPSBUX03281 SUSE SUSE-SU-2015:0336 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0264 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72154 SECTRACK 1031580 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150406(100147) GENTOO GLSA-201507-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

cpe:/a:oracle:jdk:1.5.0:update_75 cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.5.0:update_75 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:fedoraproject:fedora:20 cpe:/o:redhat:enterprise_linux:5 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0407

2015-01-21T13:59:47.793-05:00

2017-09-07T21:29:43.077-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov HP HPSBUX03281 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0068 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0085 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0136 REDHAT RHSA-2015:0264 DEBIAN DSA-3144 DEBIAN DSA-3147 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72162 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150407(100150) GENTOO GLSA-201507-14 GENTOO GLSA-201603-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

cpe:/a:oracle:jdk:1.5.0:update_75 cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.5.0:update_75 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:12.0 cpe:/o:opensuse:opensuse:13.2 cpe:/o:redhat:enterprise_linux:5.0 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0408

2015-01-21T13:59:48.577-05:00

2019-04-22T13:48:00.643-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov HP HPSBUX03281 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0068 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0085 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0136 REDHAT RHSA-2015:0264 DEBIAN DSA-3144 DEBIAN DSA-3147 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72140 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150408(100142) GENTOO GLSA-201507-14 GENTOO GLSA-201603-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

CVE-2015-0409

2015-01-21T13:59:49.310-05:00

2017-09-07T21:29:43.217-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72223 SECTRACK 1031581 XF oracle-cpujan2015-cve20150409(100188) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

cpe:/a:oracle:jdk:1.5.0:update_75 cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_71 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jdk:1.8.0:update_6 cpe:/a:oracle:jre:1.5.0:update_75 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_71 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/a:oracle:jre:1.8.0:update_6 cpe:/a:oracle:jrockit:r27.8.4 cpe:/a:oracle:jrockit:r28.3.4 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:12.0 cpe:/o:opensuse:opensuse:13.2 cpe:/o:redhat:enterprise_linux:5.0 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0410

2015-01-21T13:59:50.153-05:00

2019-04-22T13:48:00.643-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP HPSBUX03281 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0068 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0085 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0136 REDHAT RHSA-2015:0264 DEBIAN DSA-3144 DEBIAN DSA-3147 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72165 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150410(100151) CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10104 GENTOO GLSA-201507-14 CONFIRM https://source.android.com/security/bulletin/2016-11-01.html CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

CVE-2015-0411

2015-01-21T14:59:00.063-05:00

2019-02-01T12:53:36.580-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T12:57:47.323-05:00

FEDORA FEDORA-2015-1162 SUSE SUSE-SU-2015:0743 REDHAT RHSA-2015:0116 REDHAT RHSA-2015:0117 REDHAT RHSA-2015:0118 REDHAT RHSA-2015:1628 DEBIAN DSA-3135 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72191 SECTRACK 1031581 UBUNTU USN-2480-1 XF oracle-cpujan2015-cve20150411(100183) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.

cpe:/a:oracle:jdk:1.6.0:update_85 cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.6.0:update_85 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:canonical:ubuntu_linux:10.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:12.0 cpe:/o:opensuse:opensuse:13.2 cpe:/o:redhat:enterprise_linux:5.0 cpe:/o:redhat:enterprise_linux:6.0 cpe:/o:redhat:enterprise_linux:7.0

CVE-2015-0412

2015-01-21T14:59:01.123-05:00

2019-04-22T13:48:00.643-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov HP HPSBUX03281 SUSE openSUSE-SU-2015:0190 SUSE SUSE-SU-2015:0336 SUSE SUSE-SU-2015:0503 HP SSRT101951 HP SSRT101968 REDHAT RHSA-2015:0068 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 REDHAT RHSA-2015:0085 REDHAT RHSA-2015:0086 REDHAT RHSA-2015:0264 DEBIAN DSA-3144 DEBIAN DSA-3147 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72136 SECTRACK 1031580 UBUNTU USN-2486-1 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150412(100140) GENTOO GLSA-201507-14 GENTOO GLSA-201603-14 CONFIRM https://www-304.ibm.com/support/docview.wss?uid=swg21695474 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

cpe:/a:oracle:jdk:1.7.0:update_72 cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.7.0:update_72 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3

CVE-2015-0413

2015-01-21T14:59:02.187-05:00

2017-09-07T21:29:43.513-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov HP HPSBUX03281 SUSE SUSE-SU-2015:0336 HP SSRT101968 REDHAT RHSA-2015:0079 REDHAT RHSA-2015:0080 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72176 SECTRACK 1031580 UBUNTU USN-2487-1 CONFIRM http://www.vmware.com/security/advisories/VMSA-2015-0003.html XF oracle-cpujan2015-cve20150413(100156) GENTOO GLSA-201507-14 Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.

cpe:/a:oracle:fusion_middleware:11.1.1.7.0 cpe:/a:oracle:fusion_middleware:12.1.3.0.0

CVE-2015-0414

2015-01-21T14:59:03.030-05:00

2017-01-03T14:00:07.867-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-03T13:03:40.547-05:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72220 Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Fabric Layer.

cpe:/a:oracle:e-business_suite:12.1.3

CVE-2015-0415

2015-01-21T14:59:03.873-05:00

2017-09-07T21:29:43.577-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72241 SECTRACK 1031579 XF oracle-cpujan2015-cve20150415(100102) Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Session Management.

cpe:/a:oracle:supply_chain_products_suite:9.3.3

CVE-2015-0416

2015-01-21T14:59:04.733-05:00

2017-09-07T21:29:43.637-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72128 SECTRACK 1031576 XF oracle-cpujan2015-cve20150416(100109) Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors related to Roles & Privileges.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0417

2015-01-21T14:59:05.687-05:00

2017-09-07T21:29:43.700-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72211 SECTRACK 1031578 XF oracle-cpujan2015-cve20150417(100131) Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2015-0388.

CVE-2015-0418

2015-01-21T14:59:06.500-05:00

2018-10-30T12:27:35.843-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0229 DEBIAN DSA-3143 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72194 XF oracle-cpujan2015-cve20150418(100182) GENTOO GLSA-201612-27 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0419

2015-01-21T14:59:07.327-05:00

2017-09-07T21:29:43.827-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72197 SECTRACK 1031578 XF oracle-cpujan2015-cve20150419(100125) Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Portal Framework, a different vulnerability than CVE-2013-1510.

cpe:/a:oracle:fusion_middleware:11.1.1.7.0 cpe:/a:oracle:fusion_middleware:11.1.2.2.0

CVE-2015-0420

2015-01-21T14:59:08.110-05:00

2017-01-02T21:59:35.287-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SECUNIA 62479 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72225 Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Forms Services.

cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3

CVE-2015-0421

2015-01-21T14:59:08.983-05:00

2017-09-07T21:29:43.887-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0336 REDHAT RHSA-2015:0080 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72150 SECTRACK 1031580 XF oracle-cpujan2015-cve20150421(100146) GENTOO GLSA-201507-14 Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.

CVE-2015-0422

2015-01-21T14:59:09.907-05:00

2017-09-07T21:29:43.933-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72127 SECTRACK 1031576 XF oracle-cpujan2015-cve20150422(100108) Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.

CVE-2015-0423

2015-04-16T12:59:01.327-04:00

2017-01-02T21:59:35.427-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

cpe:/o:oracle:integrated_lights_out_manager_firmware:3.2.3

CVE-2015-0424

2015-01-21T14:59:10.827-05:00

2017-09-07T21:29:43.997-04:00

7.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72181 SECTRACK 1031594 XF oracle-cpujan2015-cve20150424(100158) Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to IPMI.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0425

2015-01-21T14:59:11.687-05:00

2017-09-07T21:29:44.043-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72185 SECTRACK 1031578 XF oracle-cpujan2015-cve20150425(100120) Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Siebel Core - Unix/Windows.

cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.3 cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.4

CVE-2015-0426

2015-01-21T14:59:12.563-05:00

2017-01-02T21:59:35.597-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72235 Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework.

cpe:/a:oracle:vm_virtualbox:4.3.18 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0427

2015-01-21T14:59:13.547-05:00

2018-10-30T12:27:35.843-04:00

3.2

LOCAL

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0229 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72216 XF oracle-cpujan2015-cve20150427(100181) GENTOO GLSA-201612-27 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.

cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.11

CVE-2015-0428

2015-01-21T14:59:14.420-05:00

2017-09-07T21:29:44.137-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72144 SECTRACK 1031583 XF oracle-cpujan2015-cve20150428(100169) Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control.

cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.11

CVE-2015-0429

2015-01-21T14:59:15.373-05:00

2017-09-07T21:29:44.200-04:00

3.3

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72133 SECTRACK 1031583 XF oracle-cpujan2015-cve20150429(100172) Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility.

cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.11

CVE-2015-0430

2015-01-21T14:59:16.203-05:00

2017-09-07T21:29:44.247-04:00

1.9

LOCAL

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72141 SECTRACK 1031583 XF oracle-cpujan2015-cve20150430(100175) Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility.

CVE-2015-0431

2015-01-21T14:59:17.017-05:00

2017-09-07T21:29:44.310-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72125 SECTRACK 1031576 XF oracle-cpujan2015-cve20150431(100107) Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0 6.3.1, 6.3.2, 6.3.4, and 6.3.5 allows remote attackers to affect integrity via unknown vectors related to UI Infrastructure.

cpe:/a:oracle:mysql:5.5.40 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:oracle:solaris:11.3 cpe:/o:redhat:enterprise_linux_desktop:7.0 cpe:/o:redhat:enterprise_linux_hpc_node:7.0 cpe:/o:redhat:enterprise_linux_server:7.0 cpe:/o:redhat:enterprise_linux_workstation:7.0

CVE-2015-0432

2015-01-21T14:59:17.797-05:00

2017-09-07T21:29:44.387-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-1162 SUSE SUSE-SU-2015:0743 REDHAT RHSA-2015:0116 REDHAT RHSA-2015:0117 REDHAT RHSA-2015:0118 REDHAT RHSA-2015:1628 DEBIAN DSA-3135 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72217 SECTRACK 1031581 UBUNTU USN-2480-1 XF oracle-cpujan2015-cve20150432(100187) GENTOO GLSA-201504-05 Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.

cpe:/a:oracle:communications_policy_management:9.7.3 cpe:/a:oracle:communications_policy_management:9.9.1 cpe:/a:oracle:communications_policy_management:10.4.1 cpe:/a:oracle:communications_policy_management:12.1.1 cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.5.41 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/a:oracle:mysql:5.6.22 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3:~~vmware~~~ cpe:/o:novell:suse_linux_enterprise_software_development_kit:11.0:sp3 cpe:/o:oracle:solaris:11.3

CVE-2015-0433

2015-04-16T12:59:02.623-04:00

2019-02-01T13:04:38.483-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T13:31:55.323-05:00

SUSE SUSE-SU-2015:0946 REDHAT RHSA-2015:1628 REDHAT RHSA-2015:1629 REDHAT RHSA-2015:1647 REDHAT RHSA-2015:1665 DEBIAN DSA-3229 DEBIAN DSA-3311 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 UBUNTU USN-2575-1 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.

cpe:/a:oracle:fusion_middleware:11.1.1.5 cpe:/a:oracle:fusion_middleware:11.1.1.7 cpe:/a:oracle:fusion_middleware:11.1.2.1 cpe:/a:oracle:fusion_middleware:11.1.2.2

CVE-2015-0434

2015-01-21T14:59:18.640-05:00

2017-09-07T21:29:44.433-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72226 XF oracle-cpujan2015-cve20150434(100081) Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect confidentiality via vectors related to Integration with OAM.

CVE-2015-0435

2015-01-21T14:59:19.483-05:00

2017-09-07T21:29:44.497-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72122 SECTRACK 1031576 XF oracle-cpujan2015-cve20150435(100104) Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

cpe:/a:oracle:ilearning:6.0 cpe:/a:oracle:ilearning:6.1

CVE-2015-0436

2015-01-21T14:59:20.390-05:00

2017-09-07T21:29:44.560-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72249 SECTRACK 1031589 XF oracle-cpujan2015-cve20150436(100136) Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.

cpe:/a:oracle:jdk:1.8.0:update_25 cpe:/a:oracle:jre:1.8.0:update_25 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3

CVE-2015-0437

2015-01-21T14:59:21.267-05:00

2017-09-07T21:29:44.637-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE SUSE-SU-2015:0336 REDHAT RHSA-2015:0080 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html BID 72146 SECTRACK 1031580 XF oracle-cpujan2015-cve20150437(100144) GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVE-2015-0438

2015-04-16T12:59:03.687-04:00

2017-01-02T21:59:36.363-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

cpe:/a:oracle:mysql:5.6.22 cpe:/a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3 cpe:/o:novell:suse_linux_enterprise_desktop:11:sp3 cpe:/o:novell:suse_linux_enterprise_server:11.0:sp3 cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3:~~~vmware~~

CVE-2015-0439

2015-04-16T12:59:04.577-04:00

2017-01-02T21:59:36.427-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74085 SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-4756.

cpe:/a:oracle:right_now_service_cloud:8.2.3.10.1 cpe:/a:oracle:right_now_service_cloud:8.4.7.2

CVE-2015-0440

2015-04-16T12:59:05.373-04:00

2015-04-17T15:13:38.753-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-04-17T13:48:07.483-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers to affect integrity via unknown vectors related to Information Manager Console.

cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.5.41 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/a:oracle:mysql:5.6.22 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0

CVE-2015-0441

2015-04-16T12:59:06.327-04:00

2019-02-01T12:51:30.777-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T13:29:47.693-05:00

SUSE SUSE-SU-2015:0946 REDHAT RHSA-2015:1628 REDHAT RHSA-2015:1629 REDHAT RHSA-2015:1647 REDHAT RHSA-2015:1665 DEBIAN DSA-3229 DEBIAN DSA-3311 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 UBUNTU USN-2575-1 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.

CVE-2015-0442

2017-05-11T10:29:44.247-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:oracle:fusion_middleware:11.1.1.3.0

CVE-2015-0443

2015-07-16T06:59:00.107-04:00

2015-07-16T12:14:04.630-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-07-16T11:53:51.137-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.

cpe:/a:oracle:fusion_middleware:11.1.1.3.0

CVE-2015-0444

2015-07-16T06:59:01.480-04:00

2015-07-16T12:15:55.733-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-07-16T11:44:33.510-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0445, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.

cpe:/a:oracle:fusion_middleware:11.1.1.3.0

CVE-2015-0445

2015-07-16T06:59:02.467-04:00

2015-07-16T12:17:00.847-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-07-16T11:50:52.700-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0446, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.

cpe:/a:oracle:fusion_middleware:11.1.1.3.0

CVE-2015-0446

2015-07-16T06:59:03.387-04:00

2015-07-16T12:25:15.827-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-07-16T11:48:24.353-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443, CVE-2015-0444, CVE-2015-0445, CVE-2015-2634, CVE-2015-2635, CVE-2015-2636, CVE-2015-4758, and CVE-2015-4759.

cpe:/a:oracle:e-business_suite:11.5.10.2 cpe:/a:oracle:e-business_suite:12.0.6 cpe:/a:oracle:e-business_suite:12.1.3 cpe:/a:oracle:e-business_suite:12.2.3 cpe:/a:oracle:e-business_suite:12.2.4

CVE-2015-0447

2015-04-16T12:59:07.250-04:00

2017-01-03T14:34:34.077-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-03T13:05:43.923-05:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032129 Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Configurator DMZ rules.

cpe:/o:oracle:solaris:11.2

CVE-2015-0448

2015-04-16T12:59:08.173-04:00

2017-01-03T14:04:57.987-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-03T13:05:56.987-05:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032132 Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system.

cpe:/a:oracle:fusion_middleware:10.3.6 cpe:/a:oracle:fusion_middleware:12.1.1 cpe:/a:oracle:fusion_middleware:12.1.2.0.0

CVE-2015-0449

2015-04-16T12:59:08.953-04:00

2017-01-03T14:00:35.217-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-03T13:06:18.913-05:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032131 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.

cpe:/a:oracle:fusion_middleware:11.1.1.8.0

CVE-2015-0450

2015-04-16T12:59:09.907-04:00

2017-01-02T21:59:36.753-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032131 Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to WebCenter Spaces Application.

cpe:/a:oracle:fusion_middleware:3.0-04

CVE-2015-0451

2015-04-16T12:59:10.737-04:00

2017-01-02T21:59:36.817-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032131 Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows remote authenticated users to affect confidentiality via vectors related to OpenSSO Web Agents.

cpe:/o:oracle:vm_server:3.1::~~~~sparc~ cpe:/o:oracle:vm_server:3.2::~~~~sparc~

CVE-2015-0452

2015-04-16T12:59:11.563-04:00

2017-09-08T21:29:01.533-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74127 Unspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems Products Suite 3.1 and 3.2 allows remote attackers to affect confidentiality via unknown vectors related to Ldom Manager.

cpe:/a:oracle:peoplesoft_products:8.53 cpe:/a:oracle:peoplesoft_products:8.54

CVE-2015-0453

2015-04-16T12:59:12.517-04:00

2017-01-02T21:59:36.863-05:00

3.3

ADJACENT_NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032125 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attackers to affect confidentiality via vectors related to PORTAL.

CVE-2015-0454

2017-05-11T10:29:44.280-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1 cpe:/a:oracle:database_server:12.1.0.2

CVE-2015-0455

2015-04-16T12:59:13.470-04:00

2017-01-02T21:59:36.910-05:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032118 Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.

cpe:/a:oracle:fusion_middleware:11.1.1.8.0

CVE-2015-0456

2015-04-16T12:59:14.360-04:00

2017-01-02T21:59:36.973-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1 cpe:/a:oracle:database_server:12.1.0.2

CVE-2015-0457

2015-04-16T12:59:15.190-04:00

2017-01-02T21:59:37.020-05:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032118 Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2629.

cpe:/a:oracle:jdk:1.6.0:update_91 cpe:/a:oracle:jdk:1.7.0:update_76 cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.6.0:update_91 cpe:/a:oracle:jre:1.7.0:update_76 cpe:/a:oracle:jre:1.8.0:update_40 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0458

2015-04-16T12:59:16.080-04:00

2018-10-30T12:27:35.843-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1091 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74141 SECTRACK 1032120 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

cpe:/a:oracle:javafx:2.2.76 cpe:/a:oracle:jdk:1.5.0:update_81 cpe:/a:oracle:jdk:1.6.0:update_91 cpe:/a:oracle:jdk:1.7.0:update_76 cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.5.0:update_81 cpe:/a:oracle:jre:1.6.0:update_91 cpe:/a:oracle:jre:1.7.0:update_76 cpe:/a:oracle:jre:1.8.0:update_40 cpe:/o:novell:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0459

2015-04-16T12:59:16.877-04:00

2018-10-30T12:27:35.843-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74083 SECTRACK 1032120 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.

cpe:/a:oracle:jdk:1.5.0:update_81 cpe:/a:oracle:jdk:1.6.0:update_91 cpe:/a:oracle:jdk:1.7.0:update_76 cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.5.0:update_81 cpe:/a:oracle:jre:1.6.0:update_91 cpe:/a:oracle:jre:1.7.0:update_76 cpe:/a:oracle:jre:1.8.0:update_40

CVE-2015-0460

2015-04-16T12:59:17.817-04:00

2017-11-03T21:29:02.113-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 MANDRIVA MDVSA-2015:212 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74097 SECTRACK 1032120 UBUNTU USN-2573-1 UBUNTU USN-2574-1 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

cpe:/a:oracle:fusion_middleware:11.1.1.5 cpe:/a:oracle:fusion_middleware:11.1.1.7

CVE-2015-0461

2015-04-16T12:59:18.863-04:00

2017-01-02T21:59:37.380-05:00

7.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

COMPLETE

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032131 Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine.

CVE-2015-0462

2015-04-16T12:59:19.690-04:00

2017-01-02T21:59:37.427-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032124 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

cpe:/a:oracle:supply_chain_products_suite:6.2.0 cpe:/a:oracle:supply_chain_products_suite:6.3.0 cpe:/a:oracle:supply_chain_products_suite:6.3.1 cpe:/a:oracle:supply_chain_products_suite:6.3.2 cpe:/a:oracle:supply_chain_products_suite:6.3.3 cpe:/a:oracle:supply_chain_products_suite:6.3.4 cpe:/a:oracle:supply_chain_products_suite:6.3.5 cpe:/a:oracle:supply_chain_products_suite:6.3.6

CVE-2015-0463

2015-04-16T12:59:20.630-04:00

2017-01-02T21:59:37.487-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032124 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

CVE-2015-0464

2015-04-16T12:59:21.397-04:00

2017-01-02T21:59:37.537-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032124 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, and 6.3.6 allows remote attackers to affect confidentiality via unknown vectors related to Security.

CVE-2015-0465

2015-04-16T12:59:22.223-04:00

2017-01-02T21:59:37.583-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

cpe:/a:oracle:retail_applications:12.0 cpe:/a:oracle:retail_applications:12.0in cpe:/a:oracle:retail_applications:13.0 cpe:/a:oracle:retail_applications:13.1 cpe:/a:oracle:retail_applications:13.2 cpe:/a:oracle:retail_applications:13.3 cpe:/a:oracle:retail_applications:13.4 cpe:/a:oracle:retail_applications:14.0 cpe:/a:oracle:retail_applications:14.1

CVE-2015-0466

2015-04-16T12:59:23.037-04:00

2017-09-08T21:29:01.580-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74093 SECTRACK 1032128 Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.

cpe:/a:oracle:peoplesoft_products:9.1 cpe:/a:oracle:peoplesoft_products:9.2

CVE-2015-0467

2015-07-16T06:59:04.327-04:00

2017-09-21T21:29:01.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html SECTRACK 1032917 Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors related to Security.

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:12.1.0.1

CVE-2015-0468

2015-07-16T06:59:05.390-04:00

2017-09-21T21:29:01.890-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:1353 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html SECTRACK 1032903 Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVE-2015-0469

2015-04-16T12:59:23.957-04:00

2017-11-03T21:29:02.207-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 MANDRIVA MDVSA-2015:212 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74072 SECTRACK 1032120 UBUNTU USN-2573-1 UBUNTU USN-2574-1 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.8.0:update_40

CVE-2015-0470

2015-04-16T12:59:24.817-04:00

2017-11-03T21:29:02.257-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74149 SECTRACK 1032120 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.

cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11.2

CVE-2015-0471

2015-04-16T12:59:25.707-04:00

2017-01-02T21:59:37.880-05:00

4.4

LOCAL

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74138 SECTRACK 1032132 Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libelfsign.

cpe:/a:oracle:peoplesoft_products:8.53 cpe:/a:oracle:peoplesoft_products:8.54

CVE-2015-0472

2015-04-16T12:59:26.537-04:00

2017-01-02T21:59:37.927-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032125 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology, a different vulnerability than CVE-2015-0487.

cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.5 cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.6

CVE-2015-0473

2015-04-16T12:59:27.693-04:00

2017-01-02T21:59:37.987-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032122 Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin.

cpe:/a:oracle:fusion_middleware:8.4.1 cpe:/a:oracle:fusion_middleware:8.5.0 cpe:/a:oracle:fusion_middleware:8.5.1

CVE-2015-0474

2015-04-16T12:59:28.570-04:00

2017-01-02T21:59:38.050-05:00

1.5

LOCAL

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74139 SECTRACK 1032131 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-0493.

cpe:/a:oracle:jd_edwards_products:9.1

CVE-2015-0475

2015-04-16T12:59:29.427-04:00

2017-01-02T21:59:38.097-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032126 Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Runtime Security.

cpe:/a:oracle:sql_trace_analyzer:12.1.10

CVE-2015-0476

2015-04-16T12:59:30.273-04:00

2015-04-17T13:57:24.873-04:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-04-17T10:48:54.390-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html Unspecified vulnerability in the SQL Trace Analyzer component in Oracle Support Tools before 12.1.11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

CVE-2015-0477

2015-04-16T12:59:31.180-04:00

2017-11-03T21:29:02.333-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 MANDRIVA MDVSA-2015:212 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74119 SECTRACK 1032120 UBUNTU USN-2573-1 UBUNTU USN-2574-1 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.

CVE-2015-0478

2015-04-16T12:59:32.100-04:00

2017-11-03T21:29:02.427-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 MANDRIVA MDVSA-2015:212 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74147 SECTRACK 1032120 SECTRACK 1035517 UBUNTU USN-2573-1 UBUNTU USN-2574-1 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21903565 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21960194 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.

cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1

CVE-2015-0479

2015-04-16T12:59:32.993-04:00

2017-01-02T21:59:38.410-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032118 Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect availability via unknown vectors.

CVE-2015-0480

2015-04-16T12:59:33.807-04:00

2017-11-03T21:29:02.507-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 MANDRIVA MDVSA-2015:212 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74104 SECTRACK 1032120 UBUNTU USN-2573-1 UBUNTU USN-2574-1 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools.

CVE-2015-0481

2017-05-11T10:29:44.297-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:oracle:fusion_middleware:12.1.2.0.0 cpe:/a:oracle:fusion_middleware:12.1.3.0.0

CVE-2015-0482

2015-04-16T12:59:34.587-04:00

2017-01-02T21:59:38.583-05:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032131 Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices.

cpe:/a:oracle:database_server:11.1.0.7 cpe:/a:oracle:database_server:11.2.0.3 cpe:/a:oracle:database_server:11.2.0.4 cpe:/a:oracle:database_server:12.1.0.1 cpe:/a:oracle:database_server:12.1.0.2

CVE-2015-0483

2015-04-16T12:59:35.447-04:00

2017-01-02T21:59:38.630-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032118 Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors.

cpe:/a:oracle:javafx:2.2.76 cpe:/a:oracle:jdk:1.7.0:update_76 cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.7.0:update_76 cpe:/a:oracle:jre:1.8.0:update_40 cpe:/o:opensuse:opensuse:13.2 cpe:/o:suse:linux_enterprise_server:11:sp3

CVE-2015-0484

2015-04-16T12:59:36.260-04:00

2018-10-30T12:27:35.843-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74135 SECTRACK 1032120 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.

cpe:/a:oracle:peoplesoft_products:9.1 cpe:/a:oracle:peoplesoft_products:9.2

CVE-2015-0485

2015-04-16T12:59:37.117-04:00

2017-01-02T21:59:38.753-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032125 Unspecified vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.

cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.8.0:update_40 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0486

2015-04-16T12:59:37.977-04:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 REDHAT RHSA-2015:0854 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74145 SECTRACK 1032120 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

cpe:/a:oracle:peoplesoft_products:8.53 cpe:/a:oracle:peoplesoft_products:8.54

CVE-2015-0487

2015-04-16T12:59:38.777-04:00

2017-01-02T21:59:38.880-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032125 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect integrity via vectors related to PIA Core Technology, a different vulnerability than CVE-2015-0472.

CVE-2015-0488

2015-04-16T12:59:39.727-04:00

2017-11-03T21:29:02.600-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0158.html SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0806 REDHAT RHSA-2015:0807 REDHAT RHSA-2015:0808 REDHAT RHSA-2015:0809 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 DEBIAN DSA-3234 DEBIAN DSA-3235 DEBIAN DSA-3316 MANDRIVA MDVSA-2015:212 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74111 SECTRACK 1032120 UBUNTU USN-2573-1 UBUNTU USN-2574-1 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21903565 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21960194 CONFIRM http://www-304.ibm.com/support/docview.wss?uid=swg21960769 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.

cpe:/a:oracle:e-business_suite_application_management_pack:121020 cpe:/a:oracle:e-business_suite_application_management_pack:121030

CVE-2015-0489

2015-04-16T12:59:40.527-04:00

2017-01-02T21:59:39.050-05:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032129 Unspecified vulnerability in the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP 121030 and 121020 allows local users to affect confidentiality via vectors related to EBS Plugin.

cpe:/a:oracle:supply_chain_products_suite:6.1.3.0

CVE-2015-0490

2015-04-16T12:59:41.370-04:00

2017-01-02T21:59:39.113-05:00

4.9

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032124 Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component.

cpe:/a:oracle:javafx:2.2.76 cpe:/a:oracle:jdk:1.5.0:update_81 cpe:/a:oracle:jdk:1.6.0:update_91 cpe:/a:oracle:jdk:1.7.0:update_76 cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.5.0:update_81 cpe:/a:oracle:jre:1.6.0:update_91 cpe:/a:oracle:jre:1.7.0:update_76 cpe:/a:oracle:jre:1.8.0:update_40 cpe:/o:opensuse:opensuse:13.2 cpe:/o:suse:suse_linux_enterprise_desktop:11.0:sp3

CVE-2015-0491

2015-04-16T12:59:42.230-04:00

2018-10-30T12:27:35.843-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 SUSE SUSE-SU-2015:1085 SUSE SUSE-SU-2015:1086 SUSE SUSE-SU-2015:1138 SUSE SUSE-SU-2015:1161 SUSE SUSE-SU-2015:2166 SUSE SUSE-SU-2015:2168 SUSE SUSE-SU-2015:2182 SUSE SUSE-SU-2015:2192 SUSE SUSE-SU-2015:2216 SUSE SUSE-SU-2016:0113 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 REDHAT RHSA-2015:0858 REDHAT RHSA-2015:1006 REDHAT RHSA-2015:1007 REDHAT RHSA-2015:1020 REDHAT RHSA-2015:1021 REDHAT RHSA-2015:1091 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74094 SECTRACK 1032120 CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg21883640 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.

cpe:/a:oracle:javafx:2.2.76 cpe:/a:oracle:jdk:1.5.0:update_81 cpe:/a:oracle:jdk:1.6.0:update_91 cpe:/a:oracle:jdk:1.7.0:update_76 cpe:/a:oracle:jdk:1.8.0:update_40 cpe:/a:oracle:jre:1.5.0:update_81 cpe:/a:oracle:jre:1.6.0:update_91 cpe:/a:oracle:jre:1.7.0:update_76 cpe:/a:oracle:jre:1.8.0:update_40 cpe:/o:opensuse:opensuse:13.2 cpe:/o:suse:linux_enterprise_server:11:sp3

CVE-2015-0492

2015-04-16T12:59:43.043-04:00

2018-10-30T12:27:35.843-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0773 SUSE openSUSE-SU-2015:0774 SUSE SUSE-SU-2015:0833 REDHAT RHSA-2015:0854 REDHAT RHSA-2015:0857 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74129 SECTRACK 1032120 GENTOO GLSA-201603-11 Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.

cpe:/a:oracle:fusion_middleware:8.4.1 cpe:/a:oracle:fusion_middleware:8.5.0 cpe:/a:oracle:fusion_middleware:8.5.1

CVE-2015-0493

2015-04-16T12:59:43.857-04:00

2018-10-09T15:55:38.483-04:00

1.5

LOCAL

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/131494/Oracle-Outside-In-ibpsd2.dll-PSD-File-Processing-Buffer-Overflow.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BUGTRAQ 20150416 Secunia Research: Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability BID 74134 SECTRACK 1032131 Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-0474.

cpe:/a:oracle:retail_applications:13.1 cpe:/a:oracle:retail_applications:13.2 cpe:/a:oracle:retail_applications:13.3 cpe:/a:oracle:retail_applications:13.4 cpe:/a:oracle:retail_applications:14.0 cpe:/a:oracle:retail_applications:14.1

CVE-2015-0494

2015-04-16T12:59:44.637-04:00

2017-01-02T21:59:39.410-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032128 Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors.

cpe:/a:oracle:commerce_guided_search_and_experience_manager:3.0 cpe:/a:oracle:commerce_guided_search_and_experience_manager:3.1.0 cpe:/a:oracle:commerce_guided_search_and_experience_manager:3.1.1 cpe:/a:oracle:commerce_guided_search_and_experience_manager:3.1.2 cpe:/a:oracle:commerce_guided_search_and_experience_manager:11.0 cpe:/a:oracle:commerce_guided_search_and_experience_manager:11.1

CVE-2015-0495

2015-04-16T12:59:45.450-04:00

2015-04-20T13:40:05.907-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-04-20T09:58:07.243-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3.x and 11.x allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Workbench.

cpe:/a:oracle:peoplesoft_products:8.53 cpe:/a:oracle:peoplesoft_products:8.54

CVE-2015-0496

2015-04-16T12:59:46.293-04:00

2017-01-02T21:59:39.457-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032125 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via vectors related to PIA Search Functionality.

cpe:/a:oracle:peoplesoft_products:9.1

CVE-2015-0497

2015-04-16T12:59:47.263-04:00

2017-01-02T21:59:39.503-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032125 Unspecified vulnerability in the PeopleSoft Enterprise Portal Interaction Hub component in Oracle PeopleSoft Products 9.1.00 allows remote attackers to affect integrity via unknown vectors related to Enterprise Portal.

cpe:/a:oracle:mysql:5.6.23

CVE-2015-0498

2015-04-16T12:59:48.230-04:00

2017-01-02T21:59:39.567-05:00

1.7

NETWORK

HIGH

MULTIPLE_INSTANCES

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.5.41 cpe:/a:oracle:mysql:5.5.42 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/a:oracle:mysql:5.6.22 cpe:/a:oracle:mysql:5.6.23 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:oracle:solaris:11.3

CVE-2015-0499

2015-04-16T12:59:48.997-04:00

2019-02-01T12:50:45.493-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T13:27:44.550-05:00

SUSE SUSE-SU-2015:0946 REDHAT RHSA-2015:1628 REDHAT RHSA-2015:1629 REDHAT RHSA-2015:1647 REDHAT RHSA-2015:1665 DEBIAN DSA-3229 DEBIAN DSA-3311 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 UBUNTU USN-2575-1 CONFIRM https://mariadb.com/kb/en/mariadb/mariadb-5543-release-notes/ GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.

CVE-2015-0500

2015-04-16T12:59:49.810-04:00

2017-01-02T21:59:39.707-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74081 SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.

cpe:/a:juniper:junos_space:15.1 cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.5.41 cpe:/a:oracle:mysql:5.5.42 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/a:oracle:mysql:5.6.22 cpe:/a:oracle:mysql:5.6.23 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0

CVE-2015-0501

2015-04-16T12:59:50.653-04:00

2019-02-01T12:50:09.957-05:00

5.7

NETWORK

MEDIUM

MULTIPLE_INSTANCES

NONE

COMPLETE

http://nvd.nist.gov

2019-01-30T13:25:24.107-05:00

CONFIRM http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 SUSE SUSE-SU-2015:0946 REDHAT RHSA-2015:1628 REDHAT RHSA-2015:1629 REDHAT RHSA-2015:1647 REDHAT RHSA-2015:1665 DEBIAN DSA-3229 DEBIAN DSA-3311 MANDRIVA MDVSA-2015:227 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 UBUNTU USN-2575-1 CONFIRM https://mariadb.com/kb/en/mariadb/mariadb-5543-release-notes/ GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.

cpe:/a:oracle:siebel_crm:8.1.1 cpe:/a:oracle:siebel_crm:8.2.2

CVE-2015-0502

2015-04-16T12:59:51.437-04:00

2017-01-02T21:59:40.067-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032127 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework.

cpe:/a:oracle:mysql:5.6.23

CVE-2015-0503

2015-04-16T12:59:52.297-04:00

2017-01-02T21:59:40.113-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.

cpe:/a:oracle:e-business_suite:12.0.6 cpe:/a:oracle:e-business_suite:12.1.3

CVE-2015-0504

2015-04-16T12:59:53.200-04:00

2017-01-02T21:59:40.160-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032129 Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Error Messages.

cpe:/a:oracle:mysql:5.5.0 cpe:/a:oracle:mysql:5.5.1 cpe:/a:oracle:mysql:5.5.2 cpe:/a:oracle:mysql:5.5.3 cpe:/a:oracle:mysql:5.5.4 cpe:/a:oracle:mysql:5.5.5 cpe:/a:oracle:mysql:5.5.6 cpe:/a:oracle:mysql:5.5.7 cpe:/a:oracle:mysql:5.5.8 cpe:/a:oracle:mysql:5.5.9 cpe:/a:oracle:mysql:5.5.10 cpe:/a:oracle:mysql:5.5.11 cpe:/a:oracle:mysql:5.5.12 cpe:/a:oracle:mysql:5.5.13 cpe:/a:oracle:mysql:5.5.14 cpe:/a:oracle:mysql:5.5.15 cpe:/a:oracle:mysql:5.5.16 cpe:/a:oracle:mysql:5.5.17 cpe:/a:oracle:mysql:5.5.18 cpe:/a:oracle:mysql:5.5.19 cpe:/a:oracle:mysql:5.5.20 cpe:/a:oracle:mysql:5.5.21 cpe:/a:oracle:mysql:5.5.22 cpe:/a:oracle:mysql:5.5.23 cpe:/a:oracle:mysql:5.5.24 cpe:/a:oracle:mysql:5.5.25 cpe:/a:oracle:mysql:5.5.25:a cpe:/a:oracle:mysql:5.5.26 cpe:/a:oracle:mysql:5.5.27 cpe:/a:oracle:mysql:5.5.28 cpe:/a:oracle:mysql:5.5.29 cpe:/a:oracle:mysql:5.5.30 cpe:/a:oracle:mysql:5.5.31 cpe:/a:oracle:mysql:5.5.32 cpe:/a:oracle:mysql:5.5.33 cpe:/a:oracle:mysql:5.5.34 cpe:/a:oracle:mysql:5.5.35 cpe:/a:oracle:mysql:5.5.36 cpe:/a:oracle:mysql:5.5.37 cpe:/a:oracle:mysql:5.5.38 cpe:/a:oracle:mysql:5.5.39 cpe:/a:oracle:mysql:5.5.40 cpe:/a:oracle:mysql:5.5.41 cpe:/a:oracle:mysql:5.5.42 cpe:/a:oracle:mysql:5.6.0 cpe:/a:oracle:mysql:5.6.0::~~enterprise~~~ cpe:/a:oracle:mysql:5.6.1 cpe:/a:oracle:mysql:5.6.2 cpe:/a:oracle:mysql:5.6.3 cpe:/a:oracle:mysql:5.6.4 cpe:/a:oracle:mysql:5.6.5 cpe:/a:oracle:mysql:5.6.6 cpe:/a:oracle:mysql:5.6.7 cpe:/a:oracle:mysql:5.6.8 cpe:/a:oracle:mysql:5.6.9 cpe:/a:oracle:mysql:5.6.10 cpe:/a:oracle:mysql:5.6.11 cpe:/a:oracle:mysql:5.6.12 cpe:/a:oracle:mysql:5.6.13 cpe:/a:oracle:mysql:5.6.14 cpe:/a:oracle:mysql:5.6.15 cpe:/a:oracle:mysql:5.6.16 cpe:/a:oracle:mysql:5.6.17 cpe:/a:oracle:mysql:5.6.18 cpe:/a:oracle:mysql:5.6.19 cpe:/a:oracle:mysql:5.6.20 cpe:/a:oracle:mysql:5.6.21 cpe:/a:oracle:mysql:5.6.22 cpe:/a:oracle:mysql:5.6.23 cpe:/a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3 cpe:/o:oracle:solaris:11.3 cpe:/o:suse:suse_linux_enterprise_desktop:11.0:sp3 cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3 cpe:/o:suse:suse_linux_enterprise_server:11.0:sp3:~~~vmware~~

CVE-2015-0505

2015-04-16T12:59:54.107-04:00

2019-02-01T12:49:40.520-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T13:09:57.420-05:00

SUSE SUSE-SU-2015:0946 REDHAT RHSA-2015:1628 REDHAT RHSA-2015:1629 REDHAT RHSA-2015:1647 REDHAT RHSA-2015:1665 DEBIAN DSA-3229 DEBIAN DSA-3311 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html BID 74112 SECTRACK 1032121 UBUNTU USN-2575-1 CONFIRM https://mariadb.com/kb/en/mariadb/mariadb-5543-release-notes/ GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

cpe:/a:oracle:mysql:5.6.23

CVE-2015-0506

2015-04-16T12:59:54.983-04:00

2017-01-02T21:59:40.287-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2015-0508.

cpe:/a:oracle:mysql:5.6.23

CVE-2015-0507

2015-04-16T12:59:55.767-04:00

2017-01-02T21:59:40.333-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.

cpe:/a:oracle:mysql:5.6.23

CVE-2015-0508

2015-04-16T12:59:56.577-04:00

2017-01-02T21:59:40.397-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0506.

cpe:/a:oracle:hyperion:11.1.2.2 cpe:/a:oracle:hyperion:11.1.2.3

CVE-2015-0509

2015-04-16T12:59:57.377-04:00

2017-01-02T21:59:40.457-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032123 Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis.

cpe:/a:oracle:commerce_platform:9.4 cpe:/a:oracle:commerce_platform:10.0 cpe:/a:oracle:commerce_platform:10.2

CVE-2015-0510

2015-04-16T12:59:58.157-04:00

2015-04-17T13:38:26.873-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-04-17T13:24:58.987-04:00

CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers to affect integrity via vectors related to Dynamo Application Framework - HTML Admin User Interface.

cpe:/a:oracle:mysql:5.6.23

CVE-2015-0511

2015-04-16T12:59:58.923-04:00

2017-01-02T21:59:40.490-05:00

2.8

NETWORK

MEDIUM

MULTIPLE_INSTANCES

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0946 CONFIRM http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html SECTRACK 1032121 GENTOO GLSA-201507-19 Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : SP.

cpe:/a:emc:unisphere_central:3.5.0

CVE-2015-0512

2015-02-01T20:59:05.810-05:00

2015-09-17T12:33:08.677-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-17T12:32:36.773-04:00

BUGTRAQ 20150129 ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities BID 72374 SECTRACK 1031684 Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter.

cpe:/a:emc:vipr_srm:3.6.0 cpe:/a:emc:watch4net:6.5

CVE-2015-0513

2015-01-21T10:17:11.387-05:00

2017-01-02T21:59:40.550-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150120 ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities BID 72259 SECTRACK 1031567 Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allow remote authenticated users to inject arbitrary web script or HTML by leveraging privileged access to set crafted values of unspecified fields.

cpe:/a:emc:vipr_srm:3.6.0 cpe:/a:emc:watch4net:6.5

CVE-2015-0514

2015-01-21T10:17:12.807-05:00

2018-10-09T15:55:38.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150120 ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities MISC http://packetstormsecurity.com/files/130910/EMC-M-R-Watch4net-Insecure-Credential-Storage.html FULLDISC 20150318 EMC M&R (Watch4net) data storage collector credentials are not properly protected BUGTRAQ 20150318 EMC M&R (Watch4net) data storage collector credentials are not properly protected BID 72257 SECTRACK 1031567 MISC https://www.securify.nl/advisory/SFY20141101/emc_m_r__watch4net__data_storage_collector_credentials_are_not_properly_protected.html EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM access to conduct a decryption attack.

cpe:/a:emc:vipr_srm:3.6.0 cpe:/a:emc:watch4net:6.5

CVE-2015-0515

2015-01-21T10:17:13.713-05:00

2017-01-02T21:59:40.707-05:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20150120 ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities BID 72256 SECTRACK 1031567 Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to execute arbitrary code by uploading and then accessing an executable file.

cpe:/a:emc:vipr_srm:3.6.0 cpe:/a:emc:watch4net:6.5

CVE-2015-0516

2015-01-21T10:17:14.543-05:00

2018-10-09T15:55:39.483-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150120 ESA-2015-004: EMC M&R (Watch4Net) Multiple Vulnerabilities FULLDISC 20150318 Path traversal vulnerability in EMC M&R (Watch4net) MIB Browser BUGTRAQ 20150318 Path traversal vulnerability in EMC M&R (Watch4net) MIB Browser BID 72255 SECTRACK 1031567 MISC https://www.securify.nl/advisory/SFY20141105/path_traversal_vulnerability_in_emc_m_r__watch4net__mib_browser.html Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 allows remote authenticated users to read arbitrary files via a crafted URL.

cpe:/a:emc:documentum_d2:3.1:- cpe:/a:emc:documentum_d2:3.1:sp1 cpe:/a:emc:documentum_d2:4.0 cpe:/a:emc:documentum_d2:4.1 cpe:/a:emc:documentum_d2:4.2

CVE-2015-0517

2015-02-14T10:59:00.060-05:00

2017-09-07T21:29:44.700-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150204 ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities BID 72501 SECTRACK 1031693 XF emc-documentum-cve20150517-info-disc(100874) The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.

cpe:/a:emc:documentum_d2:3.1:- cpe:/a:emc:documentum_d2:3.1:sp1 cpe:/a:emc:documentum_d2:4.0 cpe:/a:emc:documentum_d2:4.1 cpe:/a:emc:documentum_d2:4.2

CVE-2015-0518

2015-02-14T10:59:01.407-05:00

2017-09-07T21:29:44.763-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20150204 ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities BID 72502 SECTRACK 1031693 XF emc-documentum-cve20150518-priv-esc(100875) The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions.

cpe:/a:emc:captiva_capture:7.0 cpe:/a:emc:captiva_capture:7.1

CVE-2015-0519

2015-02-14T10:59:02.670-05:00

2017-09-07T21:29:44.827-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150205 ESA-2015-012: EMC Captiva Capture Sensitive Information Disclosure Vulnerability MISC http://packetstormsecurity.com/files/130284/EMC-Captiva-Capture-Sensitive-Information-Disclosure.html XF emc-captiva-cve20150519-info-disc(100748) The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL password in a DAL log file, which allows local users to obtain sensitive information by reading a file.

CVE-2015-0520

2017-05-11T10:29:44.327-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:emc:rsa_certificate_manager:6.8 cpe:/a:emc:rsa_registration_manager:6.8

CVE-2015-0521

2015-03-12T06:59:00.050-04:00

2015-09-11T11:44:03.917-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-11T11:01:27.853-04:00

MISC http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html BUGTRAQ 20150311 ESA-2015-014: RSA Digital Certificate Solution Multiple Vulnerabilities SECTRACK 1031912 Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter.

cpe:/a:emc:rsa_certificate_manager:6.8 cpe:/a:emc:rsa_registration_manager:6.8

CVE-2015-0522

2015-03-12T06:59:01.317-04:00

2015-09-11T11:44:58.383-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-11T11:00:17.577-04:00

MISC http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html BUGTRAQ 20150311 ESA-2015-014: RSA Digital Certificate Solution Multiple Vulnerabilities SECTRACK 1031912 Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers to inject arbitrary web script or HTML via vectors related to the email address parameter.

cpe:/a:emc:rsa_certificate_manager:6.8 cpe:/a:emc:rsa_registration_manager:6.8

CVE-2015-0523

2015-03-12T06:59:02.567-04:00

2016-08-24T15:26:26.800-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2016-08-24T09:48:17.440-04:00

MISC http://packetstormsecurity.com/files/130769/RSA-Digital-Certificate-Solution-XSS-Denial-Of-Service.html BUGTRAQ 20150311 ESA-2015-014: RSA Digital Certificate Solution Multiple Vulnerabilities SECTRACK 1031912 EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of service via an invalid MIME e-mail message with a multipart/* Content-Type header.

cpe:/a:emc:secure_remote_services:3.02::~~virtual~~~ cpe:/a:emc:secure_remote_services:3.03::~~virtual~~~

CVE-2015-0524

2015-03-12T06:59:03.583-04:00

2018-10-09T15:55:39.950-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html BUGTRAQ 20150310 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities FULLDISC 20150318 EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection BUGTRAQ 20150318 EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection MISC https://www.securify.nl/advisory/SFY20141113/emc_secure_remote_services_virtual_edition_provisioning_component_is_affected_by_sql_injection.html SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:emc:secure_remote_services:3.02::~~virtual~~~ cpe:/a:emc:secure_remote_services:3.03::~~virtual~~~

CVE-2015-0525

2015-03-12T06:59:04.583-04:00

2019-02-01T13:14:02.750-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2019-01-30T13:03:56.403-05:00

MISC http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html BUGTRAQ 20150310 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities FULLDISC 20150318 Command injection vulnerability in EMC Secure Remote Services Virtual Edition BUGTRAQ 20150318 Command injection vulnerability in EMC Secure Remote Services Virtual Edition MISC https://www.securify.nl/advisory/SFY20141112/command_injection_vulnerability_in_emc_secure_remote_services_virtual_edition.html The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

cpe:/a:emc:rsa_validation_manager:3.2

CVE-2015-0526

2015-06-22T11:59:00.070-04:00

2017-09-22T21:29:00.513-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150616 ESA-2015-043: RSA Validation Manager Security Update for Multiple Vulnerabilities SECTRACK 1032590 Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Validation Manager (RVM) 3.2 before build 201 allow remote attackers to inject arbitrary web script or HTML via the (1) displayMode or (2) wrapPreDisplayMode parameter.

cpe:/a:emc:documentum_xcelerated_management_system:1.1

CVE-2015-0527

2015-03-23T20:59:04.953-04:00

2015-07-28T11:19:40.467-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-07-27T16:34:37.207-04:00

MISC http://packetstormsecurity.com/files/130959/EMC-Documentum-xMS-Sensitive-Information-Disclosure.html BUGTRAQ 20150325 ESA-2015-044: EMC Documentum xMS Sensitive Information Disclosure Vulnerability EMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform (xCP) provisioning, which allows local users to obtain sensitive information by reading a file.

cpe:/o:emc:isilon_onefs:7.0.2.12 cpe:/o:emc:isilon_onefs:7.1.0.0 cpe:/o:emc:isilon_onefs:7.1.0.1 cpe:/o:emc:isilon_onefs:7.1.0.2 cpe:/o:emc:isilon_onefs:7.1.0.3 cpe:/o:emc:isilon_onefs:7.1.0.4 cpe:/o:emc:isilon_onefs:7.1.0.5 cpe:/o:emc:isilon_onefs:7.1.1.0 cpe:/o:emc:isilon_onefs:7.1.1.1 cpe:/o:emc:isilon_onefs:7.2.0.0

CVE-2015-0528

2015-03-29T06:59:04.243-04:00

2016-08-24T15:28:46.967-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2016-08-24T09:04:03.033-04:00

MISC http://packetstormsecurity.com/files/131035/EMC-Isilon-OneFS-Privilege-Escalation.html BUGTRAQ 20150325 ESA-2015-049: EMC Isilon OneFS Privilege Escalation Vulnerability The RPC daemon in EMC Isilon OneFS 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by leveraging an ability to modify system files.

cpe:/a:emc:powerpath_virtual_appliance:1.2

CVE-2015-0529

2015-04-04T21:59:00.070-04:00

2016-08-23T14:00:22.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-08-23T12:07:25.787-04:00

MISC http://packetstormsecurity.com/files/131250/EMC-PowerPath-Virtual-Appliance-Undocumented-User-Accounts.html BUGTRAQ 20150401 ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability EMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate and (2) svcuser accounts, which makes it easier for remote attackers to obtain potentially sensitive information via a login session.

cpe:/a:emc:networker:8.0.4.3 cpe:/a:emc:networker:8.1.0.0 cpe:/a:emc:networker:8.1.0.1 cpe:/a:emc:networker:8.1.0.2 cpe:/a:emc:networker:8.1.0.3 cpe:/a:emc:networker:8.1.0.4 cpe:/a:emc:networker:8.1.0.5 cpe:/a:emc:networker:8.1.1.0 cpe:/a:emc:networker:8.1.1.1 cpe:/a:emc:networker:8.1.1.2 cpe:/a:emc:networker:8.1.1.3 cpe:/a:emc:networker:8.1.1.4 cpe:/a:emc:networker:8.1.1.5 cpe:/a:emc:networker:8.1.1.6 cpe:/a:emc:networker:8.1.1.7 cpe:/a:emc:networker:8.1.1.8 cpe:/a:emc:networker:8.1.1.9 cpe:/a:emc:networker:8.1.2.0 cpe:/a:emc:networker:8.1.2.1 cpe:/a:emc:networker:8.1.2.2 cpe:/a:emc:networker:8.1.2.3 cpe:/a:emc:networker:8.1.2.4 cpe:/a:emc:networker:8.1.2.5 cpe:/a:emc:networker:8.2.0.0 cpe:/a:emc:networker:8.2.0.1 cpe:/a:emc:networker:8.2.0.2 cpe:/a:emc:networker:8.2.0.3 cpe:/a:emc:networker:8.2.0.4 cpe:/a:emc:networker:8.2.0.5 cpe:/a:emc:networker:8.2.0.6 cpe:/a:emc:networker:8.2.1.0 cpe:/a:emc:networker:8.2.1.1

CVE-2015-0530

2015-04-16T21:59:24.543-04:00

2017-01-02T21:59:40.817-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20150415 ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability SECTRACK 1032147 Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.

cpe:/a:emc:sourceone_email_management:7.1

CVE-2015-0531

2015-05-06T21:59:00.090-04:00

2016-03-31T21:04:33.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-03-31T14:58:30.717-04:00

MISC http://packetstormsecurity.com/files/131748/EMC-SourceOne-Email-Management-Account-Lockout-Policy.html BUGTRAQ 20150504 ESA-2015-077: EMC SourceOne Email Management Account Lockout SECTRACK 1032238 EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

cpe:/a:emc:rsa_identity_management_and_governance:6.9.0 cpe:/a:emc:rsa_identity_management_and_governance:6.9.1

CVE-2015-0532

2015-05-01T06:59:00.073-04:00

2016-03-31T21:05:07.263-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2016-03-31T14:58:15.450-04:00

MISC http://packetstormsecurity.com/files/131710/RSA-IMG-6.9-6.9.1-Insecure-Password-Reset.html BUGTRAQ 20150429 ESA-2015-078: RSA Identity Management and Governance (IMG) Insecure Password Reset Vulnerability SECTRACK 1032218 EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict password resets, which allows remote attackers to obtain access via crafted use of the reset process for an arbitrary valid account name, as demonstrated by a privileged account.

cpe:/a:emc:rsa_bsafe:4.0.0::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.0.1::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.0.2::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.0.3::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.0.4::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.0.5::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.0.6::~~micro_edition_suite~~~ cpe:/a:emc:rsa_bsafe:4.1::~~crypton-c_micro~~~ cpe:/a:emc:rsa_bsafe_ssl-c:2.8.9

CVE-2015-0533

2015-08-20T06:59:00.107-04:00

2016-11-28T14:16:44.453-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities BID 76377 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message, a similar issue to CVE-2014-3572.

CVE-2015-0534

2015-08-20T06:59:01.310-04:00

2017-09-20T21:29:00.883-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities BID 76377 SECTRACK 1033297 SECTRACK 1033298 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, a similar issue to CVE-2014-8275.

CVE-2015-0535

2015-08-20T06:59:02.590-04:00

2016-11-28T14:16:46.500-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities BID 76377 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.

CVE-2015-0536

2015-08-20T06:59:03.700-04:00

2016-11-28T14:16:47.453-05:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities BID 76377 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allow remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero, a similar issue to CVE-2015-1787.

CVE-2015-0537

2015-08-20T06:59:04.670-04:00

2017-09-20T21:29:00.947-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities BID 76377 SECTRACK 1033299 Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292.

cpe:/a:emc:autostart:5.5.0

CVE-2015-0538

2015-05-06T21:59:01.247-04:00

2016-04-01T08:47:21.953-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2016-03-31T14:57:56.930-04:00

MISC http://packetstormsecurity.com/files/131749/EMC-AutoStart-5.4.3-5.5.0-Packet-Injection.html BUGTRAQ 20150504 ESA-2015-084: EMC AutoStart Packet Injection Vulnerability CERT-VN VU#581276 SECTRACK 1032237 ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets.

CVE-2015-0539

2017-05-11T10:29:44.343-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:emc:document_sciences_xpression:4.2:-:~-~documentum~~~ cpe:/a:emc:document_sciences_xpression:4.2:-:~-~enterprise~-~-~compuset_engine cpe:/a:emc:document_sciences_xpression:4.2:-:~-~enterprise~-~-~publish_engine cpe:/a:emc:document_sciences_xpression:4.5:sp1:~~documentum~~~ cpe:/a:emc:document_sciences_xpression:4.5:sp1:~~enterprise~~~

CVE-2015-0540

2015-05-25T15:59:00.063-04:00

2015-05-27T09:50:45.977-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-05-27T08:50:56.790-04:00

BUGTRAQ 20150516 ESA-2015-087 EMC Document Sciences xPression SQL Injection Vulnerability SQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before P44 and 4.5 SP1 before P03 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:emc:rsa_web_threat_detection:5.0

CVE-2015-0541

2015-06-05T06:59:01.380-04:00

2016-12-30T21:59:16.983-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20150603 ESA-2015-091: RSA Web Threat Detection Cross-Site Request Forgery Vulnerability SECTRACK 1032477 Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users.

cpe:/a:emc:rsa_archer_egrc:5.5:sp1

CVE-2015-0542

2015-08-20T06:59:05.670-04:00

2017-09-20T21:29:01.007-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20150817 ESA-2015-094: RSA Archer GRC Multiple Cross-Site Request Forgery Vulnerabilities BID 76404 SECTRACK 1033300 Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the authentication of arbitrary users.

cpe:/a:emc:secure_remote_services:3.02::~~virtual~~~ cpe:/a:emc:secure_remote_services:3.03::~~virtual~~~ cpe:/a:emc:secure_remote_services:3.04::~~virtual~~~

CVE-2015-0543

2015-07-05T06:59:00.117-04:00

2016-12-27T21:59:02.993-05:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150626 ESA-2015-097: EMC Secure Remote Services (ESRS) Virtual Edition (VE) Multiple Security Vulnerabilities SECTRACK 1032740 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

cpe:/a:emc:secure_remote_services:3.02::~~virtual~~~ cpe:/a:emc:secure_remote_services:3.03::~~virtual~~~ cpe:/a:emc:secure_remote_services:3.04::~~virtual~~~

CVE-2015-0544

2015-07-05T06:59:01.020-04:00

2016-12-27T21:59:03.057-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20150626 ESA-2015-097: EMC Secure Remote Services (ESRS) Virtual Edition (VE) Multiple Security Vulnerabilities SECTRACK 1032740 EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.

cpe:/a:emc:unisphere:8.0.0::~~~vmax~~ cpe:/a:emc:unisphere:8.0.1::~~~vmax~~ cpe:/a:emc:unisphere:8.0.2::~~~vmax~~ cpe:/a:emc:unisphere:8.0.3::~~~vmax~~

CVE-2015-0545

2015-06-29T06:59:01.297-04:00

2016-12-27T21:59:03.103-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20150625 ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability SECTRACK 1032732 EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:emc:unified_infrastructure_manager%2fprovisioning:4.1

CVE-2015-0546

2015-06-17T06:59:00.070-04:00

2017-09-22T21:29:00.560-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20150616 ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning (UIM/P) Authentication Bypass Vulnerability SECTRACK 1032589 EMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name.

cpe:/a:emc:documentum_d2:4.1 cpe:/a:emc:documentum_d2:4.2 cpe:/a:emc:documentum_d2:4.5

CVE-2015-0547

2015-07-04T06:59:00.090-04:00

2016-12-27T21:59:03.150-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150701 ESA-2015-108: EMC Documentum D2 Multiple DQL Injection Vulnerabilities SECTRACK 1032769 The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

cpe:/a:emc:documentum_d2:4.1 cpe:/a:emc:documentum_d2:4.2 cpe:/a:emc:documentum_d2:4.5

CVE-2015-0548

2015-07-04T06:59:01.293-04:00

2016-12-27T21:59:03.227-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150701 ESA-2015-108: EMC Documentum D2 Multiple DQL Injection Vulnerabilities SECTRACK 1032769 The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.

cpe:/a:emc:documentum_d2:4.2

CVE-2015-0549

2015-06-28T15:59:01.163-04:00

2017-09-22T21:29:00.607-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150623 ESA-2015-109: EMC Documentum D2 Cross-Site Scripting SECTRACK 1032693 Cross-site scripting (XSS) vulnerability in EMC Documentum D2 before 4.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:emc:documentum_thumbnail_server:6.7:sp1 cpe:/a:emc:documentum_thumbnail_server:6.7:sp2 cpe:/a:emc:documentum_thumbnail_server:7.0 cpe:/a:emc:documentum_thumbnail_server:7.1 cpe:/a:emc:documentum_thumbnail_server:7.2

CVE-2015-0550

2015-06-28T15:59:02.303-04:00

2017-09-22T21:29:00.653-04:00

8.5

NETWORK

LOW

NONE

COMPLETE

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20150623 ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability SECTRACK 1032694 Directory traversal vulnerability in EMC Documentum Thumbnail Server 6.7SP1 before P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P01 allows remote attackers to bypass intended Content Server access restrictions via unspecified vectors.

cpe:/a:emc:documentum_administrator:6.7:sp1 cpe:/a:emc:documentum_administrator:6.7:sp2 cpe:/a:emc:documentum_administrator:7.0 cpe:/a:emc:documentum_administrator:7.1 cpe:/a:emc:documentum_administrator:7.2 cpe:/a:emc:documentum_digital_asset_manager:6.5:sp6 cpe:/a:emc:documentum_taskspace:6.7:sp1 cpe:/a:emc:documentum_taskspace:6.7:sp2 cpe:/a:emc:documentum_web_publisher:6.5:sp7 cpe:/a:emc:documentum_webtop:6.7:sp1 cpe:/a:emc:documentum_webtop:6.7:sp2 cpe:/a:emc:documentum_webtop:6.8

CVE-2015-0551

2015-07-04T10:59:00.090-04:00

2016-12-27T21:59:03.290-05:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20150701 ESA-2015-111: EMC Documentum WebTop Client Products Multiple Vulnerabilities SECTRACK 1032770 Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before P23, and 6.8 before P01; Documentum Administrator 6.7SP1 before P31, 6.7SP2 before P23, 7.0 before P18, 7.1 before P15, and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

cpe:/a:gnome:gcab:0.4 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0552

2015-01-15T10:59:26.623-05:00

2018-10-30T12:27:35.843-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-02-13T14:49:07.450-05:00

SUSE openSUSE-SU-2015:0043 MLIST [oss-security] 20150105 Re: CVE Request: gcab: directory traversal CONFIRM https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774580 CONFIRM https://bugzilla.gnome.org/show_bug.cgi?id=742331 Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."

cpe:/a:websitebaker:websitebaker:2.8.3:sp3

CVE-2015-0553

2015-01-21T10:28:33.917-05:00

2015-01-22T16:00:58.983-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-01-22T11:50:58.293-05:00

MISC http://packetstormsecurity.com/files/130008/CMS-Websitebaker-2.8.3-SP3-Cross-Site-Scripting.html FULLDISC 20150118 Reflecting XSS vulnerability in administrative backend of CMS Websitebaker v. 2.8.3 SP3 MISC http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-03.html MISC http://sroesemann.blogspot.de/2015/01/sroeadv-2015-03_4.html BID 72104 MISC https://twitter.com/sroesemann/status/555397239229911040 Cross-site scripting (XSS) vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 SP3 allows remote attackers to inject arbitrary web script or HTML via the page_id parameter.

cpe:/o:adb:p.dga4001n_firmware:pdg_tef_sp_4.06l.6

CVE-2015-0554

2015-01-21T13:59:50.917-05:00

2015-01-23T15:43:03.387-05:00

9.4

NETWORK

LOW

NONE

COMPLETE

NONE

COMPLETE

http://nvd.nist.gov

2015-01-22T12:26:21.787-05:00

MISC http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.DGA4001N-Information-Disclosure.html EXPLOIT-DB 35721 The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.

cpe:/a:samsung:ipolis_device_manager:1.12.2

CVE-2015-0555

2015-02-24T10:59:04.660-05:00

2016-03-31T21:05:18.733-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2016-03-31T14:37:52.003-04:00

MISC http://packetstormsecurity.com/files/131421/Samsung-iPOLiS-1.12.2-ReadConfigValue-Remote-Code-Execution.html FULLDISC 20150221 Samsung iPolis XnsSdkDeviceIpInstaller.ocx ActiveX Remote Code Execution Vulnerabilities Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in the first argument to the (1) ReadConfigValue or (2) WriteConfigValue function.

cpe:/a:arj_software:arj_archiver:3.10.22 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21 cpe:/o:fedoraproject:fedora:22

CVE-2015-0556

2015-04-08T14:59:03.797-04:00

2017-06-30T21:29:12.983-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-5603 FEDORA FEDORA-2015-5546 FEDORA FEDORA-2015-5524 DEBIAN DSA-3213 MANDRIVA MDVSA-2015:201 MLIST [oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash MLIST [oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash BID 71860 CONFIRM https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774434 GENTOO GLSA-201612-15 Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

cpe:/a:arj_software:arj_archiver:3.10.22 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21 cpe:/o:fedoraproject:fedora:22

CVE-2015-0557

2015-04-08T14:59:04.890-04:00

2017-06-30T21:29:13.047-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-5603 FEDORA FEDORA-2015-5546 FEDORA FEDORA-2015-5524 DEBIAN DSA-3213 MANDRIVA MDVSA-2015:201 MLIST [oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash MLIST [oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash BID 71895 CONFIRM https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435 GENTOO GLSA-201612-15 Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.

cpe:/a:wireshark:wireshark:1.10.0 cpe:/a:wireshark:wireshark:1.10.1 cpe:/a:wireshark:wireshark:1.10.2 cpe:/a:wireshark:wireshark:1.10.3 cpe:/a:wireshark:wireshark:1.10.4 cpe:/a:wireshark:wireshark:1.10.5 cpe:/a:wireshark:wireshark:1.10.6 cpe:/a:wireshark:wireshark:1.10.7 cpe:/a:wireshark:wireshark:1.10.8 cpe:/a:wireshark:wireshark:1.10.9 cpe:/a:wireshark:wireshark:1.10.10 cpe:/a:wireshark:wireshark:1.10.11 cpe:/a:wireshark:wireshark:1.12.0 cpe:/a:wireshark:wireshark:1.12.1 cpe:/a:wireshark:wireshark:1.12.2 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0559

2015-01-09T21:59:38.023-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-09-17T12:29:42.293-04:00

SUSE openSUSE-SU-2015:0113 CONFIRM http://www.wireshark.org/security/wnpa-sec-2015-01.html CONFIRM https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10720 CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=e843c6797db98bfceab382d5d7e76727e1014f5e Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.

CVE-2015-0560

2015-01-09T21:59:38.990-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-09-17T12:40:47.617-04:00

SUSE openSUSE-SU-2015:0113 CONFIRM http://www.wireshark.org/security/wnpa-sec-2015-01.html CONFIRM https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10806 CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a442a1c0e815fd61416cf408bd74d85a042ccc6a The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CVE-2015-0561

2015-01-09T21:59:39.913-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2016-11-01T13:49:40.003-04:00

SUSE openSUSE-SU-2015:0113 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.wireshark.org/security/wnpa-sec-2015-02.html CONFIRM https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10773 CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=8e96830156bea314207b97315ccebd605317f142 asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet.

CVE-2015-0562

2015-01-09T21:59:40.757-05:00

2018-01-04T21:29:59.743-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0019.html SUSE openSUSE-SU-2015:0113 REDHAT RHSA-2015:1460 DEBIAN DSA-3141 MANDRIVA MDVSA-2015:022 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html BID 71921 CONFIRM http://www.wireshark.org/security/wnpa-sec-2015-03.html CONFIRM https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10724 CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a559f2a050947f793c00159c0cd4d30f403f217c Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.

CVE-2015-0563

2015-01-09T21:59:41.553-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0019.html SUSE openSUSE-SU-2015:0113 MANDRIVA MDVSA-2015:022 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html BID 71916 CONFIRM http://www.wireshark.org/security/wnpa-sec-2015-04.html CONFIRM https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10823 CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=611cfd00c283e7a77a2f1fd89c01b0b9f691411b CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=854157883bd1972e012c65c0418a9732ef5d9fb0 epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

cpe:/a:wireshark:wireshark:1.10.0 cpe:/a:wireshark:wireshark:1.10.1 cpe:/a:wireshark:wireshark:1.10.2 cpe:/a:wireshark:wireshark:1.10.3 cpe:/a:wireshark:wireshark:1.10.4 cpe:/a:wireshark:wireshark:1.10.5 cpe:/a:wireshark:wireshark:1.10.6 cpe:/a:wireshark:wireshark:1.10.7 cpe:/a:wireshark:wireshark:1.10.8 cpe:/a:wireshark:wireshark:1.10.9 cpe:/a:wireshark:wireshark:1.10.10 cpe:/a:wireshark:wireshark:1.10.11 cpe:/a:wireshark:wireshark:1.12.0 cpe:/a:wireshark:wireshark:1.12.1 cpe:/a:wireshark:wireshark:1.12.2 cpe:/o:debian:debian_linux:7.0 cpe:/o:debian:debian_linux:8.0 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2 cpe:/o:oracle:linux:7.0 cpe:/o:oracle:solaris:11.2

CVE-2015-0564

2015-01-09T21:59:42.397-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://advisories.mageia.org/MGASA-2015-0019.html SUSE openSUSE-SU-2015:0113 REDHAT RHSA-2015:1460 DEBIAN DSA-3141 MANDRIVA MDVSA-2015:022 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html BID 71922 CONFIRM http://www.wireshark.org/security/wnpa-sec-2015-05.html CONFIRM https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=d3581aecda62d2a51ea7088fd46975415b03ec57 Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.

cpe:/o:linux:linux_kernel:3.0:rc1 cpe:/o:linux:linux_kernel:3.0:rc2 cpe:/o:linux:linux_kernel:3.0:rc3 cpe:/o:linux:linux_kernel:3.0:rc4 cpe:/o:linux:linux_kernel:3.0:rc5 cpe:/o:linux:linux_kernel:3.0:rc6 cpe:/o:linux:linux_kernel:3.0:rc7 cpe:/o:linux:linux_kernel:3.0.1 cpe:/o:linux:linux_kernel:3.0.2 cpe:/o:linux:linux_kernel:3.0.3 cpe:/o:linux:linux_kernel:3.0.4 cpe:/o:linux:linux_kernel:3.0.5 cpe:/o:linux:linux_kernel:3.0.6 cpe:/o:linux:linux_kernel:3.0.7 cpe:/o:linux:linux_kernel:3.0.8 cpe:/o:linux:linux_kernel:3.0.9 cpe:/o:linux:linux_kernel:3.0.10 cpe:/o:linux:linux_kernel:3.0.11 cpe:/o:linux:linux_kernel:3.0.12 cpe:/o:linux:linux_kernel:3.0.13 cpe:/o:linux:linux_kernel:3.0.14 cpe:/o:linux:linux_kernel:3.0.15 cpe:/o:linux:linux_kernel:3.0.16 cpe:/o:linux:linux_kernel:3.0.17 cpe:/o:linux:linux_kernel:3.0.18 cpe:/o:linux:linux_kernel:3.0.19 cpe:/o:linux:linux_kernel:3.0.20 cpe:/o:linux:linux_kernel:3.0.21 cpe:/o:linux:linux_kernel:3.0.22 cpe:/o:linux:linux_kernel:3.0.23 cpe:/o:linux:linux_kernel:3.0.24 cpe:/o:linux:linux_kernel:3.0.25 cpe:/o:linux:linux_kernel:3.0.26 cpe:/o:linux:linux_kernel:3.0.27 cpe:/o:linux:linux_kernel:3.0.28 cpe:/o:linux:linux_kernel:3.0.29 cpe:/o:linux:linux_kernel:3.0.30 cpe:/o:linux:linux_kernel:3.0.31 cpe:/o:linux:linux_kernel:3.0.32 cpe:/o:linux:linux_kernel:3.0.33 cpe:/o:linux:linux_kernel:3.0.34 cpe:/o:linux:linux_kernel:3.0.35 cpe:/o:linux:linux_kernel:3.0.36 cpe:/o:linux:linux_kernel:3.0.37 cpe:/o:linux:linux_kernel:3.0.38 cpe:/o:linux:linux_kernel:3.0.39 cpe:/o:linux:linux_kernel:3.0.40 cpe:/o:linux:linux_kernel:3.0.41 cpe:/o:linux:linux_kernel:3.0.42 cpe:/o:linux:linux_kernel:3.0.43 cpe:/o:linux:linux_kernel:3.0.44 cpe:/o:linux:linux_kernel:3.0.45 cpe:/o:linux:linux_kernel:3.0.46 cpe:/o:linux:linux_kernel:3.0.47 cpe:/o:linux:linux_kernel:3.0.48 cpe:/o:linux:linux_kernel:3.0.49 cpe:/o:linux:linux_kernel:3.0.50 cpe:/o:linux:linux_kernel:3.0.51 cpe:/o:linux:linux_kernel:3.0.52 cpe:/o:linux:linux_kernel:3.0.53 cpe:/o:linux:linux_kernel:3.0.54 cpe:/o:linux:linux_kernel:3.0.55 cpe:/o:linux:linux_kernel:3.0.56 cpe:/o:linux:linux_kernel:3.0.57 cpe:/o:linux:linux_kernel:3.0.58 cpe:/o:linux:linux_kernel:3.0.59 cpe:/o:linux:linux_kernel:3.0.60 cpe:/o:linux:linux_kernel:3.0.61 cpe:/o:linux:linux_kernel:3.0.62 cpe:/o:linux:linux_kernel:3.0.63 cpe:/o:linux:linux_kernel:3.0.64 cpe:/o:linux:linux_kernel:3.0.65 cpe:/o:linux:linux_kernel:3.0.66 cpe:/o:linux:linux_kernel:3.0.67 cpe:/o:linux:linux_kernel:3.0.68 cpe:/o:linux:linux_kernel:3.0.69 cpe:/o:linux:linux_kernel:3.0.70 cpe:/o:linux:linux_kernel:3.0.71 cpe:/o:linux:linux_kernel:3.0.72 cpe:/o:linux:linux_kernel:3.0.73 cpe:/o:linux:linux_kernel:3.0.74 cpe:/o:linux:linux_kernel:3.0.75 cpe:/o:linux:linux_kernel:3.0.76 cpe:/o:linux:linux_kernel:3.0.77 cpe:/o:linux:linux_kernel:3.0.78 cpe:/o:linux:linux_kernel:3.0.79 cpe:/o:linux:linux_kernel:3.0.80 cpe:/o:linux:linux_kernel:3.0.81 cpe:/o:linux:linux_kernel:3.0.82 cpe:/o:linux:linux_kernel:3.0.83 cpe:/o:linux:linux_kernel:3.0.84 cpe:/o:linux:linux_kernel:3.0.85 cpe:/o:linux:linux_kernel:3.0.86 cpe:/o:linux:linux_kernel:3.0.87 cpe:/o:linux:linux_kernel:3.0.88 cpe:/o:linux:linux_kernel:3.0.89 cpe:/o:linux:linux_kernel:3.0.90 cpe:/o:linux:linux_kernel:3.0.91 cpe:/o:linux:linux_kernel:3.0.92 cpe:/o:linux:linux_kernel:3.0.93 cpe:/o:linux:linux_kernel:3.0.94 cpe:/o:linux:linux_kernel:3.0.95 cpe:/o:linux:linux_kernel:3.0.96 cpe:/o:linux:linux_kernel:3.0.97 cpe:/o:linux:linux_kernel:3.0.98 cpe:/o:linux:linux_kernel:3.0.99 cpe:/o:linux:linux_kernel:3.0.100 cpe:/o:linux:linux_kernel:3.0.101 cpe:/o:linux:linux_kernel:3.1 cpe:/o:linux:linux_kernel:3.1:rc1 cpe:/o:linux:linux_kernel:3.1:rc2 cpe:/o:linux:linux_kernel:3.1:rc3 cpe:/o:linux:linux_kernel:3.1:rc4 cpe:/o:linux:linux_kernel:3.1.1 cpe:/o:linux:linux_kernel:3.1.2 cpe:/o:linux:linux_kernel:3.1.3 cpe:/o:linux:linux_kernel:3.1.4 cpe:/o:linux:linux_kernel:3.1.5 cpe:/o:linux:linux_kernel:3.1.6 cpe:/o:linux:linux_kernel:3.1.7 cpe:/o:linux:linux_kernel:3.1.8 cpe:/o:linux:linux_kernel:3.1.9 cpe:/o:linux:linux_kernel:3.1.10 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:3.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.2:rc2 cpe:/o:linux:linux_kernel:3.2:rc3 cpe:/o:linux:linux_kernel:3.2:rc4 cpe:/o:linux:linux_kernel:3.2:rc5 cpe:/o:linux:linux_kernel:3.2:rc6 cpe:/o:linux:linux_kernel:3.2:rc7 cpe:/o:linux:linux_kernel:3.2.1 cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.2.2 cpe:/o:linux:linux_kernel:3.2.3 cpe:/o:linux:linux_kernel:3.2.4 cpe:/o:linux:linux_kernel:3.2.5 cpe:/o:linux:linux_kernel:3.2.6 cpe:/o:linux:linux_kernel:3.2.7 cpe:/o:linux:linux_kernel:3.2.8 cpe:/o:linux:linux_kernel:3.2.9 cpe:/o:linux:linux_kernel:3.2.10 cpe:/o:linux:linux_kernel:3.2.11 cpe:/o:linux:linux_kernel:3.2.12 cpe:/o:linux:linux_kernel:3.2.13 cpe:/o:linux:linux_kernel:3.2.14 cpe:/o:linux:linux_kernel:3.2.15 cpe:/o:linux:linux_kernel:3.2.16 cpe:/o:linux:linux_kernel:3.2.17 cpe:/o:linux:linux_kernel:3.2.18 cpe:/o:linux:linux_kernel:3.2.19 cpe:/o:linux:linux_kernel:3.2.20 cpe:/o:linux:linux_kernel:3.2.21 cpe:/o:linux:linux_kernel:3.2.22 cpe:/o:linux:linux_kernel:3.2.23 cpe:/o:linux:linux_kernel:3.2.24 cpe:/o:linux:linux_kernel:3.2.25 cpe:/o:linux:linux_kernel:3.2.26 cpe:/o:linux:linux_kernel:3.2.27 cpe:/o:linux:linux_kernel:3.2.28 cpe:/o:linux:linux_kernel:3.2.29 cpe:/o:linux:linux_kernel:3.2.30 cpe:/o:linux:linux_kernel:3.2.64 cpe:/o:linux:linux_kernel:3.2.65 cpe:/o:linux:linux_kernel:3.2.66 cpe:/o:linux:linux_kernel:3.2.67 cpe:/o:linux:linux_kernel:3.2.68 cpe:/o:linux:linux_kernel:3.2.69 cpe:/o:linux:linux_kernel:3.2.70 cpe:/o:linux:linux_kernel:3.2.71 cpe:/o:linux:linux_kernel:3.2.72 cpe:/o:linux:linux_kernel:3.2.73 cpe:/o:linux:linux_kernel:3.2.74 cpe:/o:linux:linux_kernel:3.2.75 cpe:/o:linux:linux_kernel:3.2.76 cpe:/o:linux:linux_kernel:3.2.77 cpe:/o:linux:linux_kernel:3.2.78 cpe:/o:linux:linux_kernel:3.2.79 cpe:/o:linux:linux_kernel:3.2.80 cpe:/o:linux:linux_kernel:3.3 cpe:/o:linux:linux_kernel:3.3:rc1 cpe:/o:linux:linux_kernel:3.3:rc2 cpe:/o:linux:linux_kernel:3.3:rc3 cpe:/o:linux:linux_kernel:3.3:rc4 cpe:/o:linux:linux_kernel:3.3:rc5 cpe:/o:linux:linux_kernel:3.3:rc6 cpe:/o:linux:linux_kernel:3.3:rc7 cpe:/o:linux:linux_kernel:3.3.1 cpe:/o:linux:linux_kernel:3.3.2 cpe:/o:linux:linux_kernel:3.3.3 cpe:/o:linux:linux_kernel:3.3.4 cpe:/o:linux:linux_kernel:3.3.5 cpe:/o:linux:linux_kernel:3.3.6 cpe:/o:linux:linux_kernel:3.3.7 cpe:/o:linux:linux_kernel:3.3.8 cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc1 cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc2 cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc3 cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc4 cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc5 cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc6 cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc7 cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~ cpe:/o:linux:linux_kernel:3.4.1 cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.2 cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.3 cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.4 cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.5 cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.6 cpe:/o:linux:linux_kernel:3.4.7 cpe:/o:linux:linux_kernel:3.4.8 cpe:/o:linux:linux_kernel:3.4.9 cpe:/o:linux:linux_kernel:3.4.10 cpe:/o:linux:linux_kernel:3.4.11 cpe:/o:linux:linux_kernel:3.4.12 cpe:/o:linux:linux_kernel:3.4.13 cpe:/o:linux:linux_kernel:3.4.14 cpe:/o:linux:linux_kernel:3.4.15 cpe:/o:linux:linux_kernel:3.4.16 cpe:/o:linux:linux_kernel:3.4.17 cpe:/o:linux:linux_kernel:3.4.18 cpe:/o:linux:linux_kernel:3.4.19 cpe:/o:linux:linux_kernel:3.4.20 cpe:/o:linux:linux_kernel:3.4.21 cpe:/o:linux:linux_kernel:3.4.22 cpe:/o:linux:linux_kernel:3.4.23 cpe:/o:linux:linux_kernel:3.4.24 cpe:/o:linux:linux_kernel:3.4.25 cpe:/o:linux:linux_kernel:3.4.26 cpe:/o:linux:linux_kernel:3.4.27 cpe:/o:linux:linux_kernel:3.4.28 cpe:/o:linux:linux_kernel:3.4.29 cpe:/o:linux:linux_kernel:3.4.30 cpe:/o:linux:linux_kernel:3.4.31 cpe:/o:linux:linux_kernel:3.4.32 cpe:/o:linux:linux_kernel:3.4.33 cpe:/o:linux:linux_kernel:3.4.34 cpe:/o:linux:linux_kernel:3.4.35 cpe:/o:linux:linux_kernel:3.4.36 cpe:/o:linux:linux_kernel:3.4.37 cpe:/o:linux:linux_kernel:3.4.38 cpe:/o:linux:linux_kernel:3.4.39 cpe:/o:linux:linux_kernel:3.4.40 cpe:/o:linux:linux_kernel:3.4.41 cpe:/o:linux:linux_kernel:3.4.42 cpe:/o:linux:linux_kernel:3.4.43 cpe:/o:linux:linux_kernel:3.4.44 cpe:/o:linux:linux_kernel:3.4.45 cpe:/o:linux:linux_kernel:3.4.46 cpe:/o:linux:linux_kernel:3.4.47 cpe:/o:linux:linux_kernel:3.4.48 cpe:/o:linux:linux_kernel:3.4.49 cpe:/o:linux:linux_kernel:3.4.50 cpe:/o:linux:linux_kernel:3.4.51 cpe:/o:linux:linux_kernel:3.4.52 cpe:/o:linux:linux_kernel:3.4.53 cpe:/o:linux:linux_kernel:3.4.54 cpe:/o:linux:linux_kernel:3.4.55 cpe:/o:linux:linux_kernel:3.4.56 cpe:/o:linux:linux_kernel:3.4.57 cpe:/o:linux:linux_kernel:3.4.58 cpe:/o:linux:linux_kernel:3.4.59 cpe:/o:linux:linux_kernel:3.4.60 cpe:/o:linux:linux_kernel:3.4.61 cpe:/o:linux:linux_kernel:3.4.62 cpe:/o:linux:linux_kernel:3.4.63 cpe:/o:linux:linux_kernel:3.4.64 cpe:/o:linux:linux_kernel:3.4.65 cpe:/o:linux:linux_kernel:3.4.66 cpe:/o:linux:linux_kernel:3.4.67 cpe:/o:linux:linux_kernel:3.4.68 cpe:/o:linux:linux_kernel:3.4.69 cpe:/o:linux:linux_kernel:3.4.70 cpe:/o:linux:linux_kernel:3.4.71 cpe:/o:linux:linux_kernel:3.4.72 cpe:/o:linux:linux_kernel:3.4.73 cpe:/o:linux:linux_kernel:3.4.74 cpe:/o:linux:linux_kernel:3.4.75 cpe:/o:linux:linux_kernel:3.4.76 cpe:/o:linux:linux_kernel:3.4.77 cpe:/o:linux:linux_kernel:3.4.78 cpe:/o:linux:linux_kernel:3.4.79 cpe:/o:linux:linux_kernel:3.4.80 cpe:/o:linux:linux_kernel:3.4.81 cpe:/o:linux:linux_kernel:3.4.82 cpe:/o:linux:linux_kernel:3.4.83 cpe:/o:linux:linux_kernel:3.4.84 cpe:/o:linux:linux_kernel:3.4.85 cpe:/o:linux:linux_kernel:3.4.86 cpe:/o:linux:linux_kernel:3.4.87 cpe:/o:linux:linux_kernel:3.4.88 cpe:/o:linux:linux_kernel:3.4.89 cpe:/o:linux:linux_kernel:3.4.90 cpe:/o:linux:linux_kernel:3.4.91 cpe:/o:linux:linux_kernel:3.4.92 cpe:/o:linux:linux_kernel:3.4.93 cpe:/o:linux:linux_kernel:3.4.94 cpe:/o:linux:linux_kernel:3.4.95 cpe:/o:linux:linux_kernel:3.4.96 cpe:/o:linux:linux_kernel:3.4.97 cpe:/o:linux:linux_kernel:3.4.98 cpe:/o:linux:linux_kernel:3.4.99 cpe:/o:linux:linux_kernel:3.4.100 cpe:/o:linux:linux_kernel:3.4.101 cpe:/o:linux:linux_kernel:3.4.102 cpe:/o:linux:linux_kernel:3.4.103 cpe:/o:linux:linux_kernel:3.4.104 cpe:/o:linux:linux_kernel:3.4.105 cpe:/o:linux:linux_kernel:3.4.106 cpe:/o:linux:linux_kernel:3.4.107 cpe:/o:linux:linux_kernel:3.4.108 cpe:/o:linux:linux_kernel:3.4.109 cpe:/o:linux:linux_kernel:3.4.110 cpe:/o:linux:linux_kernel:3.4.111 cpe:/o:linux:linux_kernel:3.4.112 cpe:/o:linux:linux_kernel:3.5.1 cpe:/o:linux:linux_kernel:3.5.2 cpe:/o:linux:linux_kernel:3.5.3 cpe:/o:linux:linux_kernel:3.5.4 cpe:/o:linux:linux_kernel:3.5.5 cpe:/o:linux:linux_kernel:3.5.6 cpe:/o:linux:linux_kernel:3.5.7 cpe:/o:linux:linux_kernel:3.6 cpe:/o:linux:linux_kernel:3.6:rc5 cpe:/o:linux:linux_kernel:3.6.1 cpe:/o:linux:linux_kernel:3.6.2 cpe:/o:linux:linux_kernel:3.6.3 cpe:/o:linux:linux_kernel:3.6.4 cpe:/o:linux:linux_kernel:3.6.5 cpe:/o:linux:linux_kernel:3.6.6 cpe:/o:linux:linux_kernel:3.6.7 cpe:/o:linux:linux_kernel:3.6.8 cpe:/o:linux:linux_kernel:3.6.9 cpe:/o:linux:linux_kernel:3.6.10 cpe:/o:linux:linux_kernel:3.6.11 cpe:/o:linux:linux_kernel:3.7 cpe:/o:linux:linux_kernel:3.7.1 cpe:/o:linux:linux_kernel:3.7.2 cpe:/o:linux:linux_kernel:3.7.3 cpe:/o:linux:linux_kernel:3.7.4 cpe:/o:linux:linux_kernel:3.7.5 cpe:/o:linux:linux_kernel:3.7.6 cpe:/o:linux:linux_kernel:3.7.7 cpe:/o:linux:linux_kernel:3.7.8 cpe:/o:linux:linux_kernel:3.7.9 cpe:/o:linux:linux_kernel:3.7.10 cpe:/o:linux:linux_kernel:3.8.0 cpe:/o:linux:linux_kernel:3.8.1 cpe:/o:linux:linux_kernel:3.8.2 cpe:/o:linux:linux_kernel:3.8.3 cpe:/o:linux:linux_kernel:3.8.4 cpe:/o:linux:linux_kernel:3.8.5 cpe:/o:linux:linux_kernel:3.8.6 cpe:/o:linux:linux_kernel:3.8.7 cpe:/o:linux:linux_kernel:3.8.8 cpe:/o:linux:linux_kernel:3.8.9 cpe:/o:linux:linux_kernel:3.8.10 cpe:/o:linux:linux_kernel:3.8.11 cpe:/o:linux:linux_kernel:3.8.12 cpe:/o:linux:linux_kernel:3.8.13 cpe:/o:linux:linux_kernel:3.9:rc1 cpe:/o:linux:linux_kernel:3.9:rc2 cpe:/o:linux:linux_kernel:3.9:rc3 cpe:/o:linux:linux_kernel:3.9:rc4 cpe:/o:linux:linux_kernel:3.9:rc5 cpe:/o:linux:linux_kernel:3.9:rc6 cpe:/o:linux:linux_kernel:3.9:rc7 cpe:/o:linux:linux_kernel:3.9.0 cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.1 cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.2 cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.3 cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.4 cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.5 cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.6 cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.7 cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.8 cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.9 cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.10 cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.11 cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.1 cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.2 cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.3 cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.4 cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.5 cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.6 cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.7 cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.8 cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.9 cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.10 cpe:/o:linux:linux_kernel:3.10.11 cpe:/o:linux:linux_kernel:3.10.12 cpe:/o:linux:linux_kernel:3.10.13 cpe:/o:linux:linux_kernel:3.10.14 cpe:/o:linux:linux_kernel:3.10.15 cpe:/o:linux:linux_kernel:3.10.16 cpe:/o:linux:linux_kernel:3.10.17 cpe:/o:linux:linux_kernel:3.10.18 cpe:/o:linux:linux_kernel:3.10.19 cpe:/o:linux:linux_kernel:3.10.20 cpe:/o:linux:linux_kernel:3.10.21 cpe:/o:linux:linux_kernel:3.10.22 cpe:/o:linux:linux_kernel:3.10.23 cpe:/o:linux:linux_kernel:3.10.24 cpe:/o:linux:linux_kernel:3.10.25 cpe:/o:linux:linux_kernel:3.10.26 cpe:/o:linux:linux_kernel:3.10.27 cpe:/o:linux:linux_kernel:3.10.28 cpe:/o:linux:linux_kernel:3.10.29 cpe:/o:linux:linux_kernel:3.10.30 cpe:/o:linux:linux_kernel:3.10.31 cpe:/o:linux:linux_kernel:3.10.32 cpe:/o:linux:linux_kernel:3.10.33 cpe:/o:linux:linux_kernel:3.10.34 cpe:/o:linux:linux_kernel:3.10.35 cpe:/o:linux:linux_kernel:3.10.36 cpe:/o:linux:linux_kernel:3.10.37 cpe:/o:linux:linux_kernel:3.10.38 cpe:/o:linux:linux_kernel:3.10.39 cpe:/o:linux:linux_kernel:3.10.40 cpe:/o:linux:linux_kernel:3.10.41 cpe:/o:linux:linux_kernel:3.10.42 cpe:/o:linux:linux_kernel:3.10.43 cpe:/o:linux:linux_kernel:3.10.44 cpe:/o:linux:linux_kernel:3.10.45 cpe:/o:linux:linux_kernel:3.10.46 cpe:/o:linux:linux_kernel:3.10.47 cpe:/o:linux:linux_kernel:3.10.48 cpe:/o:linux:linux_kernel:3.10.49 cpe:/o:linux:linux_kernel:3.10.50 cpe:/o:linux:linux_kernel:3.10.51 cpe:/o:linux:linux_kernel:3.10.52 cpe:/o:linux:linux_kernel:3.10.53 cpe:/o:linux:linux_kernel:3.10.54 cpe:/o:linux:linux_kernel:3.10.55 cpe:/o:linux:linux_kernel:3.10.56 cpe:/o:linux:linux_kernel:3.10.57 cpe:/o:linux:linux_kernel:3.10.58 cpe:/o:linux:linux_kernel:3.10.59 cpe:/o:linux:linux_kernel:3.10.60 cpe:/o:linux:linux_kernel:3.10.61 cpe:/o:linux:linux_kernel:3.10.62 cpe:/o:linux:linux_kernel:3.10.63 cpe:/o:linux:linux_kernel:3.10.64 cpe:/o:linux:linux_kernel:3.10.65 cpe:/o:linux:linux_kernel:3.10.66 cpe:/o:linux:linux_kernel:3.10.67 cpe:/o:linux:linux_kernel:3.10.68 cpe:/o:linux:linux_kernel:3.10.69 cpe:/o:linux:linux_kernel:3.10.70 cpe:/o:linux:linux_kernel:3.10.71 cpe:/o:linux:linux_kernel:3.10.72 cpe:/o:linux:linux_kernel:3.10.73 cpe:/o:linux:linux_kernel:3.10.74 cpe:/o:linux:linux_kernel:3.10.75 cpe:/o:linux:linux_kernel:3.10.76 cpe:/o:linux:linux_kernel:3.10.77 cpe:/o:linux:linux_kernel:3.10.78 cpe:/o:linux:linux_kernel:3.10.79 cpe:/o:linux:linux_kernel:3.10.80 cpe:/o:linux:linux_kernel:3.10.81 cpe:/o:linux:linux_kernel:3.10.82 cpe:/o:linux:linux_kernel:3.10.83 cpe:/o:linux:linux_kernel:3.10.84 cpe:/o:linux:linux_kernel:3.10.85 cpe:/o:linux:linux_kernel:3.10.86 cpe:/o:linux:linux_kernel:3.10.87 cpe:/o:linux:linux_kernel:3.10.88 cpe:/o:linux:linux_kernel:3.10.89 cpe:/o:linux:linux_kernel:3.10.90 cpe:/o:linux:linux_kernel:3.10.91 cpe:/o:linux:linux_kernel:3.10.92 cpe:/o:linux:linux_kernel:3.10.93 cpe:/o:linux:linux_kernel:3.10.94 cpe:/o:linux:linux_kernel:3.10.95 cpe:/o:linux:linux_kernel:3.10.96 cpe:/o:linux:linux_kernel:3.10.97 cpe:/o:linux:linux_kernel:3.10.98 cpe:/o:linux:linux_kernel:3.10.99 cpe:/o:linux:linux_kernel:3.10.100 cpe:/o:linux:linux_kernel:3.10.101 cpe:/o:linux:linux_kernel:3.11 cpe:/o:linux:linux_kernel:3.11.1 cpe:/o:linux:linux_kernel:3.11.2 cpe:/o:linux:linux_kernel:3.11.3 cpe:/o:linux:linux_kernel:3.11.4 cpe:/o:linux:linux_kernel:3.11.5 cpe:/o:linux:linux_kernel:3.11.6 cpe:/o:linux:linux_kernel:3.11.7 cpe:/o:linux:linux_kernel:3.11.8 cpe:/o:linux:linux_kernel:3.11.9 cpe:/o:linux:linux_kernel:3.11.10 cpe:/o:linux:linux_kernel:3.12 cpe:/o:linux:linux_kernel:3.12.1 cpe:/o:linux:linux_kernel:3.12.2 cpe:/o:linux:linux_kernel:3.12.3 cpe:/o:linux:linux_kernel:3.12.4 cpe:/o:linux:linux_kernel:3.12.5 cpe:/o:linux:linux_kernel:3.12.6 cpe:/o:linux:linux_kernel:3.12.7 cpe:/o:linux:linux_kernel:3.12.8 cpe:/o:linux:linux_kernel:3.12.9 cpe:/o:linux:linux_kernel:3.12.10 cpe:/o:linux:linux_kernel:3.12.11 cpe:/o:linux:linux_kernel:3.12.12 cpe:/o:linux:linux_kernel:3.12.13 cpe:/o:linux:linux_kernel:3.12.14 cpe:/o:linux:linux_kernel:3.12.15 cpe:/o:linux:linux_kernel:3.12.16 cpe:/o:linux:linux_kernel:3.12.17 cpe:/o:linux:linux_kernel:3.12.18 cpe:/o:linux:linux_kernel:3.12.19 cpe:/o:linux:linux_kernel:3.12.20 cpe:/o:linux:linux_kernel:3.12.21 cpe:/o:linux:linux_kernel:3.12.22 cpe:/o:linux:linux_kernel:3.12.23 cpe:/o:linux:linux_kernel:3.12.24 cpe:/o:linux:linux_kernel:3.12.25 cpe:/o:linux:linux_kernel:3.12.26 cpe:/o:linux:linux_kernel:3.12.27 cpe:/o:linux:linux_kernel:3.12.28 cpe:/o:linux:linux_kernel:3.12.29 cpe:/o:linux:linux_kernel:3.12.30 cpe:/o:linux:linux_kernel:3.12.31 cpe:/o:linux:linux_kernel:3.12.32 cpe:/o:linux:linux_kernel:3.12.33 cpe:/o:linux:linux_kernel:3.12.34 cpe:/o:linux:linux_kernel:3.12.35 cpe:/o:linux:linux_kernel:3.12.36 cpe:/o:linux:linux_kernel:3.12.37 cpe:/o:linux:linux_kernel:3.12.38 cpe:/o:linux:linux_kernel:3.12.39 cpe:/o:linux:linux_kernel:3.12.40 cpe:/o:linux:linux_kernel:3.12.41 cpe:/o:linux:linux_kernel:3.12.42 cpe:/o:linux:linux_kernel:3.12.43 cpe:/o:linux:linux_kernel:3.12.44 cpe:/o:linux:linux_kernel:3.12.45 cpe:/o:linux:linux_kernel:3.12.46 cpe:/o:linux:linux_kernel:3.12.47 cpe:/o:linux:linux_kernel:3.12.48 cpe:/o:linux:linux_kernel:3.12.49 cpe:/o:linux:linux_kernel:3.12.50 cpe:/o:linux:linux_kernel:3.12.51 cpe:/o:linux:linux_kernel:3.12.52 cpe:/o:linux:linux_kernel:3.12.53 cpe:/o:linux:linux_kernel:3.12.54 cpe:/o:linux:linux_kernel:3.12.55 cpe:/o:linux:linux_kernel:3.12.56 cpe:/o:linux:linux_kernel:3.12.57 cpe:/o:linux:linux_kernel:3.12.58 cpe:/o:linux:linux_kernel:3.12.59 cpe:/o:linux:linux_kernel:3.13 cpe:/o:linux:linux_kernel:3.13.1 cpe:/o:linux:linux_kernel:3.13.2 cpe:/o:linux:linux_kernel:3.13.3 cpe:/o:linux:linux_kernel:3.13.4 cpe:/o:linux:linux_kernel:3.13.5 cpe:/o:linux:linux_kernel:3.13.6 cpe:/o:linux:linux_kernel:3.13.7 cpe:/o:linux:linux_kernel:3.13.8 cpe:/o:linux:linux_kernel:3.13.9 cpe:/o:linux:linux_kernel:3.13.10 cpe:/o:linux:linux_kernel:3.13.11 cpe:/o:linux:linux_kernel:3.14:- cpe:/o:linux:linux_kernel:3.14:rc1 cpe:/o:linux:linux_kernel:3.14:rc2 cpe:/o:linux:linux_kernel:3.14:rc3 cpe:/o:linux:linux_kernel:3.14:rc4 cpe:/o:linux:linux_kernel:3.14:rc5 cpe:/o:linux:linux_kernel:3.14:rc6 cpe:/o:linux:linux_kernel:3.14:rc7 cpe:/o:linux:linux_kernel:3.14:rc8 cpe:/o:linux:linux_kernel:3.14.1 cpe:/o:linux:linux_kernel:3.14.2 cpe:/o:linux:linux_kernel:3.14.3 cpe:/o:linux:linux_kernel:3.14.4 cpe:/o:linux:linux_kernel:3.14.5 cpe:/o:linux:linux_kernel:3.14.10 cpe:/o:linux:linux_kernel:3.14.11 cpe:/o:linux:linux_kernel:3.14.12 cpe:/o:linux:linux_kernel:3.14.13 cpe:/o:linux:linux_kernel:3.14.14 cpe:/o:linux:linux_kernel:3.14.15 cpe:/o:linux:linux_kernel:3.14.16 cpe:/o:linux:linux_kernel:3.14.17 cpe:/o:linux:linux_kernel:3.14.18 cpe:/o:linux:linux_kernel:3.14.19 cpe:/o:linux:linux_kernel:3.14.20 cpe:/o:linux:linux_kernel:3.14.21 cpe:/o:linux:linux_kernel:3.14.22 cpe:/o:linux:linux_kernel:3.14.23 cpe:/o:linux:linux_kernel:3.14.24 cpe:/o:linux:linux_kernel:3.14.25 cpe:/o:linux:linux_kernel:3.14.26 cpe:/o:linux:linux_kernel:3.14.27 cpe:/o:linux:linux_kernel:3.14.28 cpe:/o:linux:linux_kernel:3.14.29 cpe:/o:linux:linux_kernel:3.14.30 cpe:/o:linux:linux_kernel:3.14.31 cpe:/o:linux:linux_kernel:3.14.32 cpe:/o:linux:linux_kernel:3.14.33 cpe:/o:linux:linux_kernel:3.14.34 cpe:/o:linux:linux_kernel:3.14.35 cpe:/o:linux:linux_kernel:3.14.36 cpe:/o:linux:linux_kernel:3.14.37 cpe:/o:linux:linux_kernel:3.14.38 cpe:/o:linux:linux_kernel:3.14.39 cpe:/o:linux:linux_kernel:3.14.40 cpe:/o:linux:linux_kernel:3.14.41 cpe:/o:linux:linux_kernel:3.14.42 cpe:/o:linux:linux_kernel:3.14.43 cpe:/o:linux:linux_kernel:3.14.44 cpe:/o:linux:linux_kernel:3.14.45 cpe:/o:linux:linux_kernel:3.14.46 cpe:/o:linux:linux_kernel:3.14.47 cpe:/o:linux:linux_kernel:3.14.48 cpe:/o:linux:linux_kernel:3.14.49 cpe:/o:linux:linux_kernel:3.14.50 cpe:/o:linux:linux_kernel:3.14.51 cpe:/o:linux:linux_kernel:3.14.52 cpe:/o:linux:linux_kernel:3.14.53 cpe:/o:linux:linux_kernel:3.14.54 cpe:/o:linux:linux_kernel:3.14.55 cpe:/o:linux:linux_kernel:3.14.56 cpe:/o:linux:linux_kernel:3.14.57 cpe:/o:linux:linux_kernel:3.14.58 cpe:/o:linux:linux_kernel:3.14.59 cpe:/o:linux:linux_kernel:3.14.60 cpe:/o:linux:linux_kernel:3.14.61 cpe:/o:linux:linux_kernel:3.14.62 cpe:/o:linux:linux_kernel:3.14.63 cpe:/o:linux:linux_kernel:3.14.64 cpe:/o:linux:linux_kernel:3.14.65 cpe:/o:linux:linux_kernel:3.14.66 cpe:/o:linux:linux_kernel:3.14.67 cpe:/o:linux:linux_kernel:3.14.68 cpe:/o:linux:linux_kernel:3.15 cpe:/o:linux:linux_kernel:3.15.1 cpe:/o:linux:linux_kernel:3.15.2 cpe:/o:linux:linux_kernel:3.15.3 cpe:/o:linux:linux_kernel:3.15.4 cpe:/o:linux:linux_kernel:3.15.5 cpe:/o:linux:linux_kernel:3.15.6 cpe:/o:linux:linux_kernel:3.15.7 cpe:/o:linux:linux_kernel:3.15.8 cpe:/o:linux:linux_kernel:3.15.10 cpe:/o:linux:linux_kernel:3.16.0 cpe:/o:linux:linux_kernel:3.16.1 cpe:/o:linux:linux_kernel:3.16.4 cpe:/o:linux:linux_kernel:3.16.5 cpe:/o:linux:linux_kernel:3.16.6 cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.17.5 cpe:/o:linux:linux_kernel:3.17.6 cpe:/o:linux:linux_kernel:3.17.7 cpe:/o:linux:linux_kernel:3.17.8 cpe:/o:linux:linux_kernel:3.18.0 cpe:/o:linux:linux_kernel:3.18.1 cpe:/o:linux:linux_kernel:3.18.2 cpe:/o:linux:linux_kernel:3.18.3 cpe:/o:linux:linux_kernel:3.18.4 cpe:/o:linux:linux_kernel:3.18.5 cpe:/o:linux:linux_kernel:3.18.6 cpe:/o:linux:linux_kernel:3.18.7 cpe:/o:linux:linux_kernel:3.18.8 cpe:/o:linux:linux_kernel:3.18.10 cpe:/o:linux:linux_kernel:3.18.11 cpe:/o:linux:linux_kernel:3.18.12 cpe:/o:linux:linux_kernel:3.18.13 cpe:/o:linux:linux_kernel:3.18.14 cpe:/o:linux:linux_kernel:3.18.15 cpe:/o:linux:linux_kernel:3.18.16 cpe:/o:linux:linux_kernel:3.18.17 cpe:/o:linux:linux_kernel:3.18.18 cpe:/o:linux:linux_kernel:3.18.19 cpe:/o:linux:linux_kernel:3.18.20 cpe:/o:linux:linux_kernel:3.18.21 cpe:/o:linux:linux_kernel:3.18.22 cpe:/o:linux:linux_kernel:3.18.23 cpe:/o:linux:linux_kernel:3.18.24 cpe:/o:linux:linux_kernel:3.18.25 cpe:/o:linux:linux_kernel:3.18.26 cpe:/o:linux:linux_kernel:3.18.27 cpe:/o:linux:linux_kernel:3.18.28 cpe:/o:linux:linux_kernel:3.18.29 cpe:/o:linux:linux_kernel:3.18.30 cpe:/o:linux:linux_kernel:3.18.31 cpe:/o:linux:linux_kernel:3.18.32 cpe:/o:linux:linux_kernel:3.19 cpe:/o:linux:linux_kernel:3.19.1 cpe:/o:linux:linux_kernel:3.19.2 cpe:/o:linux:linux_kernel:3.19.3 cpe:/o:linux:linux_kernel:3.19.4 cpe:/o:linux:linux_kernel:3.19.5 cpe:/o:linux:linux_kernel:3.19.6 cpe:/o:linux:linux_kernel:3.19.7 cpe:/o:linux:linux_kernel:3.19.8

CVE-2015-0568

2016-08-07T17:59:01.143-04:00

2016-11-28T14:16:54.533-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 92379 CONFIRM https://www.codeaurora.org/projects/security-advisories/multiple-issues-camera-drivers-cve-2014-9410-cve-2015-0568 Use-after-free vulnerability in the msm_set_crop function in drivers/media/video/msm/msm_camera.c in the MSM-Camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via an application that makes a crafted ioctl call.

cpe:/o:linux:linux_kernel:3.0:rc1 cpe:/o:linux:linux_kernel:3.0:rc2 cpe:/o:linux:linux_kernel:3.0:rc3 cpe:/o:linux:linux_kernel:3.0:rc4 cpe:/o:linux:linux_kernel:3.0:rc5 cpe:/o:linux:linux_kernel:3.0:rc6 cpe:/o:linux:linux_kernel:3.0:rc7 cpe:/o:linux:linux_kernel:3.0.1 cpe:/o:linux:linux_kernel:3.0.2 cpe:/o:linux:linux_kernel:3.0.3 cpe:/o:linux:linux_kernel:3.0.4 cpe:/o:linux:linux_kernel:3.0.5 cpe:/o:linux:linux_kernel:3.0.6 cpe:/o:linux:linux_kernel:3.0.7 cpe:/o:linux:linux_kernel:3.0.8 cpe:/o:linux:linux_kernel:3.0.9 cpe:/o:linux:linux_kernel:3.0.10 cpe:/o:linux:linux_kernel:3.0.11 cpe:/o:linux:linux_kernel:3.0.12 cpe:/o:linux:linux_kernel:3.0.13 cpe:/o:linux:linux_kernel:3.0.14 cpe:/o:linux:linux_kernel:3.0.15 cpe:/o:linux:linux_kernel:3.0.16 cpe:/o:linux:linux_kernel:3.0.17 cpe:/o:linux:linux_kernel:3.0.18 cpe:/o:linux:linux_kernel:3.0.19 cpe:/o:linux:linux_kernel:3.0.20 cpe:/o:linux:linux_kernel:3.0.21 cpe:/o:linux:linux_kernel:3.0.22 cpe:/o:linux:linux_kernel:3.0.23 cpe:/o:linux:linux_kernel:3.0.24 cpe:/o:linux:linux_kernel:3.0.25 cpe:/o:linux:linux_kernel:3.0.26 cpe:/o:linux:linux_kernel:3.0.27 cpe:/o:linux:linux_kernel:3.0.28 cpe:/o:linux:linux_kernel:3.0.29 cpe:/o:linux:linux_kernel:3.0.30 cpe:/o:linux:linux_kernel:3.0.31 cpe:/o:linux:linux_kernel:3.0.32 cpe:/o:linux:linux_kernel:3.0.33 cpe:/o:linux:linux_kernel:3.0.34 cpe:/o:linux:linux_kernel:3.0.35 cpe:/o:linux:linux_kernel:3.0.36 cpe:/o:linux:linux_kernel:3.0.37 cpe:/o:linux:linux_kernel:3.0.38 cpe:/o:linux:linux_kernel:3.0.39 cpe:/o:linux:linux_kernel:3.0.40 cpe:/o:linux:linux_kernel:3.0.41 cpe:/o:linux:linux_kernel:3.0.42 cpe:/o:linux:linux_kernel:3.0.43 cpe:/o:linux:linux_kernel:3.0.44 cpe:/o:linux:linux_kernel:3.0.45 cpe:/o:linux:linux_kernel:3.0.46 cpe:/o:linux:linux_kernel:3.0.47 cpe:/o:linux:linux_kernel:3.0.48 cpe:/o:linux:linux_kernel:3.0.49 cpe:/o:linux:linux_kernel:3.0.50 cpe:/o:linux:linux_kernel:3.0.51 cpe:/o:linux:linux_kernel:3.0.52 cpe:/o:linux:linux_kernel:3.0.53 cpe:/o:linux:linux_kernel:3.0.54 cpe:/o:linux:linux_kernel:3.0.55 cpe:/o:linux:linux_kernel:3.0.56 cpe:/o:linux:linux_kernel:3.0.57 cpe:/o:linux:linux_kernel:3.0.58 cpe:/o:linux:linux_kernel:3.0.59 cpe:/o:linux:linux_kernel:3.0.60 cpe:/o:linux:linux_kernel:3.0.61 cpe:/o:linux:linux_kernel:3.0.62 cpe:/o:linux:linux_kernel:3.0.63 cpe:/o:linux:linux_kernel:3.0.64 cpe:/o:linux:linux_kernel:3.0.65 cpe:/o:linux:linux_kernel:3.0.66 cpe:/o:linux:linux_kernel:3.0.67 cpe:/o:linux:linux_kernel:3.0.68 cpe:/o:linux:linux_kernel:3.0.69 cpe:/o:linux:linux_kernel:3.0.70 cpe:/o:linux:linux_kernel:3.0.71 cpe:/o:linux:linux_kernel:3.0.72 cpe:/o:linux:linux_kernel:3.0.73 cpe:/o:linux:linux_kernel:3.0.74 cpe:/o:linux:linux_kernel:3.0.75 cpe:/o:linux:linux_kernel:3.0.76 cpe:/o:linux:linux_kernel:3.0.77 cpe:/o:linux:linux_kernel:3.0.78 cpe:/o:linux:linux_kernel:3.0.79 cpe:/o:linux:linux_kernel:3.0.80 cpe:/o:linux:linux_kernel:3.0.81 cpe:/o:linux:linux_kernel:3.0.82 cpe:/o:linux:linux_kernel:3.0.83 cpe:/o:linux:linux_kernel:3.0.84 cpe:/o:linux:linux_kernel:3.0.85 cpe:/o:linux:linux_kernel:3.0.86 cpe:/o:linux:linux_kernel:3.0.87 cpe:/o:linux:linux_kernel:3.0.88 cpe:/o:linux:linux_kernel:3.0.89 cpe:/o:linux:linux_kernel:3.0.90 cpe:/o:linux:linux_kernel:3.0.91 cpe:/o:linux:linux_kernel:3.0.92 cpe:/o:linux:linux_kernel:3.0.93 cpe:/o:linux:linux_kernel:3.0.94 cpe:/o:linux:linux_kernel:3.0.95 cpe:/o:linux:linux_kernel:3.0.96 cpe:/o:linux:linux_kernel:3.0.97 cpe:/o:linux:linux_kernel:3.0.98 cpe:/o:linux:linux_kernel:3.0.99 cpe:/o:linux:linux_kernel:3.0.100 cpe:/o:linux:linux_kernel:3.0.101 cpe:/o:linux:linux_kernel:3.1 cpe:/o:linux:linux_kernel:3.1:rc1 cpe:/o:linux:linux_kernel:3.1:rc2 cpe:/o:linux:linux_kernel:3.1:rc3 cpe:/o:linux:linux_kernel:3.1:rc4 cpe:/o:linux:linux_kernel:3.1.1 cpe:/o:linux:linux_kernel:3.1.2 cpe:/o:linux:linux_kernel:3.1.3 cpe:/o:linux:linux_kernel:3.1.4 cpe:/o:linux:linux_kernel:3.1.5 cpe:/o:linux:linux_kernel:3.1.6 cpe:/o:linux:linux_kernel:3.1.7 cpe:/o:linux:linux_kernel:3.1.8 cpe:/o:linux:linux_kernel:3.1.9 cpe:/o:linux:linux_kernel:3.1.10 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:3.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.2:rc2 cpe:/o:linux:linux_kernel:3.2:rc3 cpe:/o:linux:linux_kernel:3.2:rc4 cpe:/o:linux:linux_kernel:3.2:rc5 cpe:/o:linux:linux_kernel:3.2:rc6 cpe:/o:linux:linux_kernel:3.2:rc7 cpe:/o:linux:linux_kernel:3.2.1 cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.2.2 cpe:/o:linux:linux_kernel:3.2.3 cpe:/o:linux:linux_kernel:3.2.4 cpe:/o:linux:linux_kernel:3.2.5 cpe:/o:linux:linux_kernel:3.2.6 cpe:/o:linux:linux_kernel:3.2.7 cpe:/o:linux:linux_kernel:3.2.8 cpe:/o:linux:linux_kernel:3.2.9 cpe:/o:linux:linux_kernel:3.2.10 cpe:/o:linux:linux_kernel:3.2.11 cpe:/o:linux:linux_kernel:3.2.12 cpe:/o:linux:linux_kernel:3.2.13 cpe:/o:linux:linux_kernel:3.2.14 cpe:/o:linux:linux_kernel:3.2.15 cpe:/o:linux:linux_kernel:3.2.16 cpe:/o:linux:linux_kernel:3.2.17 cpe:/o:linux:linux_kernel:3.2.18 cpe:/o:linux:linux_kernel:3.2.19 cpe:/o:linux:linux_kernel:3.2.20 cpe:/o:linux:linux_kernel:3.2.21 cpe:/o:linux:linux_kernel:3.2.22 cpe:/o:linux:linux_kernel:3.2.23 cpe:/o:linux:linux_kernel:3.2.24 cpe:/o:linux:linux_kernel:3.2.25 cpe:/o:linux:linux_kernel:3.2.26 cpe:/o:linux:linux_kernel:3.2.27 cpe:/o:linux:linux_kernel:3.2.28 cpe:/o:linux:linux_kernel:3.2.29 cpe:/o:linux:linux_kernel:3.2.30 cpe:/o:linux:linux_kernel:3.2.31 cpe:/o:linux:linux_kernel:3.2.32 cpe:/o:linux:linux_kernel:3.2.33 cpe:/o:linux:linux_kernel:3.2.34 cpe:/o:linux:linux_kernel:3.2.35 cpe:/o:linux:linux_kernel:3.2.36 cpe:/o:linux:linux_kernel:3.2.37 cpe:/o:linux:linux_kernel:3.2.38 cpe:/o:linux:linux_kernel:3.2.39 cpe:/o:linux:linux_kernel:3.2.40 cpe:/o:linux:linux_kernel:3.2.41 cpe:/o:linux:linux_kernel:3.2.42 cpe:/o:linux:linux_kernel:3.2.43 cpe:/o:linux:linux_kernel:3.2.44 cpe:/o:linux:linux_kernel:3.2.45 cpe:/o:linux:linux_kernel:3.2.46 cpe:/o:linux:linux_kernel:3.2.47 cpe:/o:linux:linux_kernel:3.2.48 cpe:/o:linux:linux_kernel:3.2.49 cpe:/o:linux:linux_kernel:3.2.50 cpe:/o:linux:linux_kernel:3.2.51 cpe:/o:linux:linux_kernel:3.2.52 cpe:/o:linux:linux_kernel:3.2.53 cpe:/o:linux:linux_kernel:3.2.54 cpe:/o:linux:linux_kernel:3.2.55 cpe:/o:linux:linux_kernel:3.2.56 cpe:/o:linux:linux_kernel:3.2.57 cpe:/o:linux:linux_kernel:3.2.58 cpe:/o:linux:linux_kernel:3.2.59 cpe:/o:linux:linux_kernel:3.2.60 cpe:/o:linux:linux_kernel:3.2.61 cpe:/o:linux:linux_kernel:3.2.62 cpe:/o:linux:linux_kernel:3.2.63 cpe:/o:linux:linux_kernel:3.2.64 cpe:/o:linux:linux_kernel:3.2.65 cpe:/o:linux:linux_kernel:3.2.66 cpe:/o:linux:linux_kernel:3.2.67 cpe:/o:linux:linux_kernel:3.2.68 cpe:/o:linux:linux_kernel:3.2.69 cpe:/o:linux:linux_kernel:3.2.70 cpe:/o:linux:linux_kernel:3.2.71 cpe:/o:linux:linux_kernel:3.2.72 cpe:/o:linux:linux_kernel:3.2.73 cpe:/o:linux:linux_kernel:3.2.74 cpe:/o:linux:linux_kernel:3.2.75 cpe:/o:linux:linux_kernel:3.2.76 cpe:/o:linux:linux_kernel:3.2.77 cpe:/o:linux:linux_kernel:3.2.78 cpe:/o:linux:linux_kernel:3.2.79 cpe:/o:linux:linux_kernel:3.2.80 cpe:/o:linux:linux_kernel:3.3 cpe:/o:linux:linux_kernel:3.3:rc1 cpe:/o:linux:linux_kernel:3.3:rc2 cpe:/o:linux:linux_kernel:3.3:rc3 cpe:/o:linux:linux_kernel:3.3:rc4 cpe:/o:linux:linux_kernel:3.3:rc5 cpe:/o:linux:linux_kernel:3.3:rc6 cpe:/o:linux:linux_kernel:3.3:rc7 cpe:/o:linux:linux_kernel:3.3.1 cpe:/o:linux:linux_kernel:3.3.2 cpe:/o:linux:linux_kernel:3.3.3 cpe:/o:linux:linux_kernel:3.3.4 cpe:/o:linux:linux_kernel:3.3.5 cpe:/o:linux:linux_kernel:3.3.6 cpe:/o:linux:linux_kernel:3.3.7 cpe:/o:linux:linux_kernel:3.3.8 cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc1 cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc2 cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc3 cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc4 cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc5 cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc6 cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc7 cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~ cpe:/o:linux:linux_kernel:3.4.1 cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.2 cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.3 cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.4 cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.5 cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.6 cpe:/o:linux:linux_kernel:3.4.7 cpe:/o:linux:linux_kernel:3.4.8 cpe:/o:linux:linux_kernel:3.4.9 cpe:/o:linux:linux_kernel:3.4.10 cpe:/o:linux:linux_kernel:3.4.11 cpe:/o:linux:linux_kernel:3.4.12 cpe:/o:linux:linux_kernel:3.4.13 cpe:/o:linux:linux_kernel:3.4.14 cpe:/o:linux:linux_kernel:3.4.15 cpe:/o:linux:linux_kernel:3.4.16 cpe:/o:linux:linux_kernel:3.4.17 cpe:/o:linux:linux_kernel:3.4.18 cpe:/o:linux:linux_kernel:3.4.19 cpe:/o:linux:linux_kernel:3.4.20 cpe:/o:linux:linux_kernel:3.4.21 cpe:/o:linux:linux_kernel:3.4.22 cpe:/o:linux:linux_kernel:3.4.23 cpe:/o:linux:linux_kernel:3.4.24 cpe:/o:linux:linux_kernel:3.4.25 cpe:/o:linux:linux_kernel:3.4.26 cpe:/o:linux:linux_kernel:3.4.27 cpe:/o:linux:linux_kernel:3.4.28 cpe:/o:linux:linux_kernel:3.4.29 cpe:/o:linux:linux_kernel:3.4.30 cpe:/o:linux:linux_kernel:3.4.31 cpe:/o:linux:linux_kernel:3.4.32 cpe:/o:linux:linux_kernel:3.4.33 cpe:/o:linux:linux_kernel:3.4.34 cpe:/o:linux:linux_kernel:3.4.35 cpe:/o:linux:linux_kernel:3.4.36 cpe:/o:linux:linux_kernel:3.4.37 cpe:/o:linux:linux_kernel:3.4.38 cpe:/o:linux:linux_kernel:3.4.39 cpe:/o:linux:linux_kernel:3.4.40 cpe:/o:linux:linux_kernel:3.4.41 cpe:/o:linux:linux_kernel:3.4.42 cpe:/o:linux:linux_kernel:3.4.43 cpe:/o:linux:linux_kernel:3.4.44 cpe:/o:linux:linux_kernel:3.4.45 cpe:/o:linux:linux_kernel:3.4.46 cpe:/o:linux:linux_kernel:3.4.47 cpe:/o:linux:linux_kernel:3.4.48 cpe:/o:linux:linux_kernel:3.4.49 cpe:/o:linux:linux_kernel:3.4.50 cpe:/o:linux:linux_kernel:3.4.51 cpe:/o:linux:linux_kernel:3.4.52 cpe:/o:linux:linux_kernel:3.4.53 cpe:/o:linux:linux_kernel:3.4.54 cpe:/o:linux:linux_kernel:3.4.55 cpe:/o:linux:linux_kernel:3.4.56 cpe:/o:linux:linux_kernel:3.4.57 cpe:/o:linux:linux_kernel:3.4.58 cpe:/o:linux:linux_kernel:3.4.59 cpe:/o:linux:linux_kernel:3.4.60 cpe:/o:linux:linux_kernel:3.4.61 cpe:/o:linux:linux_kernel:3.4.62 cpe:/o:linux:linux_kernel:3.4.63 cpe:/o:linux:linux_kernel:3.4.64 cpe:/o:linux:linux_kernel:3.4.65 cpe:/o:linux:linux_kernel:3.4.66 cpe:/o:linux:linux_kernel:3.4.67 cpe:/o:linux:linux_kernel:3.4.68 cpe:/o:linux:linux_kernel:3.4.69 cpe:/o:linux:linux_kernel:3.4.70 cpe:/o:linux:linux_kernel:3.4.71 cpe:/o:linux:linux_kernel:3.4.72 cpe:/o:linux:linux_kernel:3.4.73 cpe:/o:linux:linux_kernel:3.4.74 cpe:/o:linux:linux_kernel:3.4.75 cpe:/o:linux:linux_kernel:3.4.76 cpe:/o:linux:linux_kernel:3.4.77 cpe:/o:linux:linux_kernel:3.4.78 cpe:/o:linux:linux_kernel:3.4.79 cpe:/o:linux:linux_kernel:3.4.80 cpe:/o:linux:linux_kernel:3.4.81 cpe:/o:linux:linux_kernel:3.4.82 cpe:/o:linux:linux_kernel:3.4.83 cpe:/o:linux:linux_kernel:3.4.84 cpe:/o:linux:linux_kernel:3.4.85 cpe:/o:linux:linux_kernel:3.4.86 cpe:/o:linux:linux_kernel:3.4.87 cpe:/o:linux:linux_kernel:3.4.88 cpe:/o:linux:linux_kernel:3.4.89 cpe:/o:linux:linux_kernel:3.4.90 cpe:/o:linux:linux_kernel:3.4.91 cpe:/o:linux:linux_kernel:3.4.92 cpe:/o:linux:linux_kernel:3.4.93 cpe:/o:linux:linux_kernel:3.4.94 cpe:/o:linux:linux_kernel:3.4.95 cpe:/o:linux:linux_kernel:3.4.96 cpe:/o:linux:linux_kernel:3.4.97 cpe:/o:linux:linux_kernel:3.4.98 cpe:/o:linux:linux_kernel:3.4.99 cpe:/o:linux:linux_kernel:3.4.100 cpe:/o:linux:linux_kernel:3.4.101 cpe:/o:linux:linux_kernel:3.4.102 cpe:/o:linux:linux_kernel:3.4.103 cpe:/o:linux:linux_kernel:3.4.104 cpe:/o:linux:linux_kernel:3.4.105 cpe:/o:linux:linux_kernel:3.4.106 cpe:/o:linux:linux_kernel:3.4.107 cpe:/o:linux:linux_kernel:3.4.108 cpe:/o:linux:linux_kernel:3.4.109 cpe:/o:linux:linux_kernel:3.4.110 cpe:/o:linux:linux_kernel:3.4.111 cpe:/o:linux:linux_kernel:3.4.112 cpe:/o:linux:linux_kernel:3.5.1 cpe:/o:linux:linux_kernel:3.5.2 cpe:/o:linux:linux_kernel:3.5.3 cpe:/o:linux:linux_kernel:3.5.4 cpe:/o:linux:linux_kernel:3.5.5 cpe:/o:linux:linux_kernel:3.5.6 cpe:/o:linux:linux_kernel:3.5.7 cpe:/o:linux:linux_kernel:3.6 cpe:/o:linux:linux_kernel:3.6.1 cpe:/o:linux:linux_kernel:3.6.2 cpe:/o:linux:linux_kernel:3.6.3 cpe:/o:linux:linux_kernel:3.6.4 cpe:/o:linux:linux_kernel:3.6.5 cpe:/o:linux:linux_kernel:3.6.6 cpe:/o:linux:linux_kernel:3.6.7 cpe:/o:linux:linux_kernel:3.6.8 cpe:/o:linux:linux_kernel:3.6.9 cpe:/o:linux:linux_kernel:3.6.10 cpe:/o:linux:linux_kernel:3.6.11 cpe:/o:linux:linux_kernel:3.7 cpe:/o:linux:linux_kernel:3.7.1 cpe:/o:linux:linux_kernel:3.7.2 cpe:/o:linux:linux_kernel:3.7.3 cpe:/o:linux:linux_kernel:3.7.4 cpe:/o:linux:linux_kernel:3.7.5 cpe:/o:linux:linux_kernel:3.7.6 cpe:/o:linux:linux_kernel:3.7.7 cpe:/o:linux:linux_kernel:3.7.8 cpe:/o:linux:linux_kernel:3.7.9 cpe:/o:linux:linux_kernel:3.7.10 cpe:/o:linux:linux_kernel:3.8.0 cpe:/o:linux:linux_kernel:3.8.1 cpe:/o:linux:linux_kernel:3.8.2 cpe:/o:linux:linux_kernel:3.8.3 cpe:/o:linux:linux_kernel:3.8.4 cpe:/o:linux:linux_kernel:3.8.5 cpe:/o:linux:linux_kernel:3.8.6 cpe:/o:linux:linux_kernel:3.8.7 cpe:/o:linux:linux_kernel:3.8.8 cpe:/o:linux:linux_kernel:3.8.9 cpe:/o:linux:linux_kernel:3.8.10 cpe:/o:linux:linux_kernel:3.8.11 cpe:/o:linux:linux_kernel:3.8.12 cpe:/o:linux:linux_kernel:3.8.13 cpe:/o:linux:linux_kernel:3.9:rc1 cpe:/o:linux:linux_kernel:3.9:rc2 cpe:/o:linux:linux_kernel:3.9:rc3 cpe:/o:linux:linux_kernel:3.9:rc4 cpe:/o:linux:linux_kernel:3.9:rc5 cpe:/o:linux:linux_kernel:3.9:rc6 cpe:/o:linux:linux_kernel:3.9:rc7 cpe:/o:linux:linux_kernel:3.9.0 cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.1 cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.2 cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.3 cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.4 cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.5 cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.6 cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.7 cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.8 cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.9 cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.10 cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.11 cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.1 cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.2 cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.3 cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.4 cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.5 cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.6 cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.7 cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.8 cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.9 cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.10 cpe:/o:linux:linux_kernel:3.10.11 cpe:/o:linux:linux_kernel:3.10.12 cpe:/o:linux:linux_kernel:3.10.13 cpe:/o:linux:linux_kernel:3.10.14 cpe:/o:linux:linux_kernel:3.10.15 cpe:/o:linux:linux_kernel:3.10.16 cpe:/o:linux:linux_kernel:3.10.17 cpe:/o:linux:linux_kernel:3.10.18 cpe:/o:linux:linux_kernel:3.10.19 cpe:/o:linux:linux_kernel:3.10.20 cpe:/o:linux:linux_kernel:3.10.21 cpe:/o:linux:linux_kernel:3.10.22 cpe:/o:linux:linux_kernel:3.10.23 cpe:/o:linux:linux_kernel:3.10.24 cpe:/o:linux:linux_kernel:3.10.25 cpe:/o:linux:linux_kernel:3.10.26 cpe:/o:linux:linux_kernel:3.10.27 cpe:/o:linux:linux_kernel:3.10.28 cpe:/o:linux:linux_kernel:3.10.29 cpe:/o:linux:linux_kernel:3.10.30 cpe:/o:linux:linux_kernel:3.10.31 cpe:/o:linux:linux_kernel:3.10.32 cpe:/o:linux:linux_kernel:3.10.33 cpe:/o:linux:linux_kernel:3.10.34 cpe:/o:linux:linux_kernel:3.10.35 cpe:/o:linux:linux_kernel:3.10.36 cpe:/o:linux:linux_kernel:3.10.37 cpe:/o:linux:linux_kernel:3.10.38 cpe:/o:linux:linux_kernel:3.10.39 cpe:/o:linux:linux_kernel:3.10.40 cpe:/o:linux:linux_kernel:3.10.41 cpe:/o:linux:linux_kernel:3.10.42 cpe:/o:linux:linux_kernel:3.10.43 cpe:/o:linux:linux_kernel:3.10.44 cpe:/o:linux:linux_kernel:3.10.45 cpe:/o:linux:linux_kernel:3.10.46 cpe:/o:linux:linux_kernel:3.10.47 cpe:/o:linux:linux_kernel:3.10.48 cpe:/o:linux:linux_kernel:3.10.49 cpe:/o:linux:linux_kernel:3.10.50 cpe:/o:linux:linux_kernel:3.10.51 cpe:/o:linux:linux_kernel:3.10.52 cpe:/o:linux:linux_kernel:3.10.53 cpe:/o:linux:linux_kernel:3.10.54 cpe:/o:linux:linux_kernel:3.10.55 cpe:/o:linux:linux_kernel:3.10.56 cpe:/o:linux:linux_kernel:3.10.57 cpe:/o:linux:linux_kernel:3.10.58 cpe:/o:linux:linux_kernel:3.10.59 cpe:/o:linux:linux_kernel:3.10.60 cpe:/o:linux:linux_kernel:3.10.61 cpe:/o:linux:linux_kernel:3.10.62 cpe:/o:linux:linux_kernel:3.10.63 cpe:/o:linux:linux_kernel:3.10.64 cpe:/o:linux:linux_kernel:3.10.65 cpe:/o:linux:linux_kernel:3.10.66 cpe:/o:linux:linux_kernel:3.10.67 cpe:/o:linux:linux_kernel:3.10.68 cpe:/o:linux:linux_kernel:3.10.69 cpe:/o:linux:linux_kernel:3.10.70 cpe:/o:linux:linux_kernel:3.10.71 cpe:/o:linux:linux_kernel:3.10.72 cpe:/o:linux:linux_kernel:3.10.73 cpe:/o:linux:linux_kernel:3.10.74 cpe:/o:linux:linux_kernel:3.10.75 cpe:/o:linux:linux_kernel:3.10.76 cpe:/o:linux:linux_kernel:3.10.77 cpe:/o:linux:linux_kernel:3.10.78 cpe:/o:linux:linux_kernel:3.10.79 cpe:/o:linux:linux_kernel:3.10.80 cpe:/o:linux:linux_kernel:3.10.81 cpe:/o:linux:linux_kernel:3.10.82 cpe:/o:linux:linux_kernel:3.10.83 cpe:/o:linux:linux_kernel:3.10.84 cpe:/o:linux:linux_kernel:3.10.85 cpe:/o:linux:linux_kernel:3.10.86 cpe:/o:linux:linux_kernel:3.10.87 cpe:/o:linux:linux_kernel:3.10.88 cpe:/o:linux:linux_kernel:3.10.89 cpe:/o:linux:linux_kernel:3.10.90 cpe:/o:linux:linux_kernel:3.10.91 cpe:/o:linux:linux_kernel:3.10.92 cpe:/o:linux:linux_kernel:3.10.93 cpe:/o:linux:linux_kernel:3.10.94 cpe:/o:linux:linux_kernel:3.10.95 cpe:/o:linux:linux_kernel:3.10.96 cpe:/o:linux:linux_kernel:3.10.97 cpe:/o:linux:linux_kernel:3.10.98 cpe:/o:linux:linux_kernel:3.10.99 cpe:/o:linux:linux_kernel:3.10.100 cpe:/o:linux:linux_kernel:3.10.101 cpe:/o:linux:linux_kernel:3.11 cpe:/o:linux:linux_kernel:3.11.1 cpe:/o:linux:linux_kernel:3.11.2 cpe:/o:linux:linux_kernel:3.11.3 cpe:/o:linux:linux_kernel:3.11.4 cpe:/o:linux:linux_kernel:3.11.5 cpe:/o:linux:linux_kernel:3.11.6 cpe:/o:linux:linux_kernel:3.11.7 cpe:/o:linux:linux_kernel:3.11.8 cpe:/o:linux:linux_kernel:3.11.9 cpe:/o:linux:linux_kernel:3.11.10 cpe:/o:linux:linux_kernel:3.12 cpe:/o:linux:linux_kernel:3.12.1 cpe:/o:linux:linux_kernel:3.12.2 cpe:/o:linux:linux_kernel:3.12.3 cpe:/o:linux:linux_kernel:3.12.4 cpe:/o:linux:linux_kernel:3.12.5 cpe:/o:linux:linux_kernel:3.12.6 cpe:/o:linux:linux_kernel:3.12.7 cpe:/o:linux:linux_kernel:3.12.8 cpe:/o:linux:linux_kernel:3.12.9 cpe:/o:linux:linux_kernel:3.12.10 cpe:/o:linux:linux_kernel:3.12.11 cpe:/o:linux:linux_kernel:3.12.12 cpe:/o:linux:linux_kernel:3.12.13 cpe:/o:linux:linux_kernel:3.12.14 cpe:/o:linux:linux_kernel:3.12.15 cpe:/o:linux:linux_kernel:3.12.16 cpe:/o:linux:linux_kernel:3.12.17 cpe:/o:linux:linux_kernel:3.12.18 cpe:/o:linux:linux_kernel:3.12.19 cpe:/o:linux:linux_kernel:3.12.20 cpe:/o:linux:linux_kernel:3.12.21 cpe:/o:linux:linux_kernel:3.12.22 cpe:/o:linux:linux_kernel:3.12.23 cpe:/o:linux:linux_kernel:3.12.24 cpe:/o:linux:linux_kernel:3.12.25 cpe:/o:linux:linux_kernel:3.12.26 cpe:/o:linux:linux_kernel:3.12.27 cpe:/o:linux:linux_kernel:3.12.28 cpe:/o:linux:linux_kernel:3.12.29 cpe:/o:linux:linux_kernel:3.12.30 cpe:/o:linux:linux_kernel:3.12.31 cpe:/o:linux:linux_kernel:3.12.32 cpe:/o:linux:linux_kernel:3.12.33 cpe:/o:linux:linux_kernel:3.12.34 cpe:/o:linux:linux_kernel:3.12.35 cpe:/o:linux:linux_kernel:3.12.36 cpe:/o:linux:linux_kernel:3.12.37 cpe:/o:linux:linux_kernel:3.12.38 cpe:/o:linux:linux_kernel:3.12.39 cpe:/o:linux:linux_kernel:3.12.40 cpe:/o:linux:linux_kernel:3.12.41 cpe:/o:linux:linux_kernel:3.12.42 cpe:/o:linux:linux_kernel:3.12.43 cpe:/o:linux:linux_kernel:3.12.44 cpe:/o:linux:linux_kernel:3.12.45 cpe:/o:linux:linux_kernel:3.12.46 cpe:/o:linux:linux_kernel:3.12.47 cpe:/o:linux:linux_kernel:3.12.48 cpe:/o:linux:linux_kernel:3.12.49 cpe:/o:linux:linux_kernel:3.12.50 cpe:/o:linux:linux_kernel:3.12.51 cpe:/o:linux:linux_kernel:3.12.52 cpe:/o:linux:linux_kernel:3.12.53 cpe:/o:linux:linux_kernel:3.12.54 cpe:/o:linux:linux_kernel:3.12.55 cpe:/o:linux:linux_kernel:3.12.56 cpe:/o:linux:linux_kernel:3.12.57 cpe:/o:linux:linux_kernel:3.12.58 cpe:/o:linux:linux_kernel:3.12.59 cpe:/o:linux:linux_kernel:3.13 cpe:/o:linux:linux_kernel:3.13.1 cpe:/o:linux:linux_kernel:3.13.2 cpe:/o:linux:linux_kernel:3.13.3 cpe:/o:linux:linux_kernel:3.13.4 cpe:/o:linux:linux_kernel:3.13.5 cpe:/o:linux:linux_kernel:3.13.6 cpe:/o:linux:linux_kernel:3.13.7 cpe:/o:linux:linux_kernel:3.13.8 cpe:/o:linux:linux_kernel:3.13.9 cpe:/o:linux:linux_kernel:3.13.10 cpe:/o:linux:linux_kernel:3.13.11 cpe:/o:linux:linux_kernel:3.14:- cpe:/o:linux:linux_kernel:3.14:rc1 cpe:/o:linux:linux_kernel:3.14:rc2 cpe:/o:linux:linux_kernel:3.14:rc3 cpe:/o:linux:linux_kernel:3.14:rc4 cpe:/o:linux:linux_kernel:3.14:rc5 cpe:/o:linux:linux_kernel:3.14:rc6 cpe:/o:linux:linux_kernel:3.14:rc7 cpe:/o:linux:linux_kernel:3.14:rc8 cpe:/o:linux:linux_kernel:3.14.1 cpe:/o:linux:linux_kernel:3.14.2 cpe:/o:linux:linux_kernel:3.14.3 cpe:/o:linux:linux_kernel:3.14.4 cpe:/o:linux:linux_kernel:3.14.5 cpe:/o:linux:linux_kernel:3.14.6 cpe:/o:linux:linux_kernel:3.14.7 cpe:/o:linux:linux_kernel:3.14.8 cpe:/o:linux:linux_kernel:3.14.10 cpe:/o:linux:linux_kernel:3.14.11 cpe:/o:linux:linux_kernel:3.14.12 cpe:/o:linux:linux_kernel:3.14.13 cpe:/o:linux:linux_kernel:3.14.14 cpe:/o:linux:linux_kernel:3.14.15 cpe:/o:linux:linux_kernel:3.14.16 cpe:/o:linux:linux_kernel:3.14.17 cpe:/o:linux:linux_kernel:3.14.18 cpe:/o:linux:linux_kernel:3.14.19 cpe:/o:linux:linux_kernel:3.14.20 cpe:/o:linux:linux_kernel:3.14.21 cpe:/o:linux:linux_kernel:3.14.22 cpe:/o:linux:linux_kernel:3.14.23 cpe:/o:linux:linux_kernel:3.14.24 cpe:/o:linux:linux_kernel:3.14.25 cpe:/o:linux:linux_kernel:3.14.26 cpe:/o:linux:linux_kernel:3.14.27 cpe:/o:linux:linux_kernel:3.14.28 cpe:/o:linux:linux_kernel:3.14.29 cpe:/o:linux:linux_kernel:3.14.30 cpe:/o:linux:linux_kernel:3.14.31 cpe:/o:linux:linux_kernel:3.14.32 cpe:/o:linux:linux_kernel:3.14.33 cpe:/o:linux:linux_kernel:3.14.34 cpe:/o:linux:linux_kernel:3.14.35 cpe:/o:linux:linux_kernel:3.14.36 cpe:/o:linux:linux_kernel:3.14.37 cpe:/o:linux:linux_kernel:3.14.38 cpe:/o:linux:linux_kernel:3.14.39 cpe:/o:linux:linux_kernel:3.14.40 cpe:/o:linux:linux_kernel:3.14.41 cpe:/o:linux:linux_kernel:3.14.42 cpe:/o:linux:linux_kernel:3.14.43 cpe:/o:linux:linux_kernel:3.14.44 cpe:/o:linux:linux_kernel:3.14.45 cpe:/o:linux:linux_kernel:3.14.46 cpe:/o:linux:linux_kernel:3.14.47 cpe:/o:linux:linux_kernel:3.14.48 cpe:/o:linux:linux_kernel:3.14.49 cpe:/o:linux:linux_kernel:3.14.50 cpe:/o:linux:linux_kernel:3.14.51 cpe:/o:linux:linux_kernel:3.14.52 cpe:/o:linux:linux_kernel:3.14.53 cpe:/o:linux:linux_kernel:3.14.54 cpe:/o:linux:linux_kernel:3.14.55 cpe:/o:linux:linux_kernel:3.14.56 cpe:/o:linux:linux_kernel:3.14.57 cpe:/o:linux:linux_kernel:3.14.58 cpe:/o:linux:linux_kernel:3.14.59 cpe:/o:linux:linux_kernel:3.14.60 cpe:/o:linux:linux_kernel:3.14.61 cpe:/o:linux:linux_kernel:3.14.62 cpe:/o:linux:linux_kernel:3.14.63 cpe:/o:linux:linux_kernel:3.14.64 cpe:/o:linux:linux_kernel:3.14.65 cpe:/o:linux:linux_kernel:3.14.66 cpe:/o:linux:linux_kernel:3.14.67 cpe:/o:linux:linux_kernel:3.14.68 cpe:/o:linux:linux_kernel:3.15 cpe:/o:linux:linux_kernel:3.15.1 cpe:/o:linux:linux_kernel:3.15.2 cpe:/o:linux:linux_kernel:3.15.3 cpe:/o:linux:linux_kernel:3.15.4 cpe:/o:linux:linux_kernel:3.15.5 cpe:/o:linux:linux_kernel:3.15.6 cpe:/o:linux:linux_kernel:3.15.7 cpe:/o:linux:linux_kernel:3.15.8 cpe:/o:linux:linux_kernel:3.15.10 cpe:/o:linux:linux_kernel:3.16.0 cpe:/o:linux:linux_kernel:3.16.1 cpe:/o:linux:linux_kernel:3.16.2 cpe:/o:linux:linux_kernel:3.16.3 cpe:/o:linux:linux_kernel:3.16.4 cpe:/o:linux:linux_kernel:3.16.5 cpe:/o:linux:linux_kernel:3.16.6 cpe:/o:linux:linux_kernel:3.16.7 cpe:/o:linux:linux_kernel:3.17.1 cpe:/o:linux:linux_kernel:3.17.2 cpe:/o:linux:linux_kernel:3.17.3 cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.17.4 cpe:/o:linux:linux_kernel:3.17.5 cpe:/o:linux:linux_kernel:3.17.6 cpe:/o:linux:linux_kernel:3.17.7 cpe:/o:linux:linux_kernel:3.17.8 cpe:/o:linux:linux_kernel:3.18.0 cpe:/o:linux:linux_kernel:3.18.1 cpe:/o:linux:linux_kernel:3.18.2 cpe:/o:linux:linux_kernel:3.18.3 cpe:/o:linux:linux_kernel:3.18.4 cpe:/o:linux:linux_kernel:3.18.5 cpe:/o:linux:linux_kernel:3.18.6 cpe:/o:linux:linux_kernel:3.18.7 cpe:/o:linux:linux_kernel:3.18.8 cpe:/o:linux:linux_kernel:3.18.9 cpe:/o:linux:linux_kernel:3.18.10 cpe:/o:linux:linux_kernel:3.18.11 cpe:/o:linux:linux_kernel:3.18.12 cpe:/o:linux:linux_kernel:3.18.13 cpe:/o:linux:linux_kernel:3.18.14 cpe:/o:linux:linux_kernel:3.18.15 cpe:/o:linux:linux_kernel:3.18.16 cpe:/o:linux:linux_kernel:3.18.17 cpe:/o:linux:linux_kernel:3.18.18 cpe:/o:linux:linux_kernel:3.18.19 cpe:/o:linux:linux_kernel:3.18.20 cpe:/o:linux:linux_kernel:3.18.21 cpe:/o:linux:linux_kernel:3.18.22 cpe:/o:linux:linux_kernel:3.18.23 cpe:/o:linux:linux_kernel:3.18.24 cpe:/o:linux:linux_kernel:3.18.25 cpe:/o:linux:linux_kernel:3.18.26 cpe:/o:linux:linux_kernel:3.18.27 cpe:/o:linux:linux_kernel:3.18.28 cpe:/o:linux:linux_kernel:3.18.29 cpe:/o:linux:linux_kernel:3.18.30 cpe:/o:linux:linux_kernel:3.18.31 cpe:/o:linux:linux_kernel:3.18.32 cpe:/o:linux:linux_kernel:3.19 cpe:/o:linux:linux_kernel:3.19.1 cpe:/o:linux:linux_kernel:3.19.2 cpe:/o:linux:linux_kernel:3.19.3 cpe:/o:linux:linux_kernel:3.19.4 cpe:/o:linux:linux_kernel:3.19.5 cpe:/o:linux:linux_kernel:3.19.6 cpe:/o:linux:linux_kernel:3.19.7 cpe:/o:linux:linux_kernel:3.19.8 cpe:/o:linux:linux_kernel:4.0.0 cpe:/o:linux:linux_kernel:4.0.1 cpe:/o:linux:linux_kernel:4.0.2 cpe:/o:linux:linux_kernel:4.0.3 cpe:/o:linux:linux_kernel:4.0.4 cpe:/o:linux:linux_kernel:4.0.5 cpe:/o:linux:linux_kernel:4.0.6 cpe:/o:linux:linux_kernel:4.0.7 cpe:/o:linux:linux_kernel:4.0.8 cpe:/o:linux:linux_kernel:4.0.9 cpe:/o:linux:linux_kernel:4.1.0 cpe:/o:linux:linux_kernel:4.1.1 cpe:/o:linux:linux_kernel:4.1.2 cpe:/o:linux:linux_kernel:4.1.3 cpe:/o:linux:linux_kernel:4.1.4 cpe:/o:linux:linux_kernel:4.1.5 cpe:/o:linux:linux_kernel:4.1.6 cpe:/o:linux:linux_kernel:4.1.7 cpe:/o:linux:linux_kernel:4.1.8 cpe:/o:linux:linux_kernel:4.1.9 cpe:/o:linux:linux_kernel:4.1.10 cpe:/o:linux:linux_kernel:4.1.11 cpe:/o:linux:linux_kernel:4.1.12 cpe:/o:linux:linux_kernel:4.1.13 cpe:/o:linux:linux_kernel:4.1.14 cpe:/o:linux:linux_kernel:4.1.15 cpe:/o:linux:linux_kernel:4.1.16 cpe:/o:linux:linux_kernel:4.1.17 cpe:/o:linux:linux_kernel:4.1.18 cpe:/o:linux:linux_kernel:4.1.19 cpe:/o:linux:linux_kernel:4.1.20 cpe:/o:linux:linux_kernel:4.1.21 cpe:/o:linux:linux_kernel:4.1.22 cpe:/o:linux:linux_kernel:4.1.23 cpe:/o:linux:linux_kernel:4.2.0 cpe:/o:linux:linux_kernel:4.2.1 cpe:/o:linux:linux_kernel:4.2.2 cpe:/o:linux:linux_kernel:4.2.3 cpe:/o:linux:linux_kernel:4.2.4 cpe:/o:linux:linux_kernel:4.2.5 cpe:/o:linux:linux_kernel:4.2.6 cpe:/o:linux:linux_kernel:4.2.7 cpe:/o:linux:linux_kernel:4.2.8 cpe:/o:linux:linux_kernel:4.3.0 cpe:/o:linux:linux_kernel:4.3.1 cpe:/o:linux:linux_kernel:4.3.2 cpe:/o:linux:linux_kernel:4.3.3 cpe:/o:linux:linux_kernel:4.3.4 cpe:/o:linux:linux_kernel:4.3.5 cpe:/o:linux:linux_kernel:4.3.6 cpe:/o:linux:linux_kernel:4.4.0 cpe:/o:linux:linux_kernel:4.4.1 cpe:/o:linux:linux_kernel:4.4.2 cpe:/o:linux:linux_kernel:4.4.3 cpe:/o:linux:linux_kernel:4.4.4 cpe:/o:linux:linux_kernel:4.4.5 cpe:/o:linux:linux_kernel:4.4.6 cpe:/o:linux:linux_kernel:4.4.7 cpe:/o:linux:linux_kernel:4.4.8 cpe:/o:linux:linux_kernel:4.4.9 cpe:/o:linux:linux_kernel:4.5.0 cpe:/o:linux:linux_kernel:4.5.1 cpe:/o:linux:linux_kernel:4.5.2 cpe:/o:linux:linux_kernel:4.5.3

CVE-2015-0569

2016-05-09T06:59:00.187-04:00

2017-09-09T21:29:00.857-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://source.android.com/security/bulletin/2016-05-01.html BID 77691 CONFIRM https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015 EXPLOIT-DB 39308 Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that establishes a packet filter.

cpe:/o:linux:linux_kernel:3.0:rc1 cpe:/o:linux:linux_kernel:3.0:rc2 cpe:/o:linux:linux_kernel:3.0:rc3 cpe:/o:linux:linux_kernel:3.0:rc4 cpe:/o:linux:linux_kernel:3.0:rc5 cpe:/o:linux:linux_kernel:3.0:rc6 cpe:/o:linux:linux_kernel:3.0:rc7 cpe:/o:linux:linux_kernel:3.0.1 cpe:/o:linux:linux_kernel:3.0.2 cpe:/o:linux:linux_kernel:3.0.3 cpe:/o:linux:linux_kernel:3.0.4 cpe:/o:linux:linux_kernel:3.0.5 cpe:/o:linux:linux_kernel:3.0.6 cpe:/o:linux:linux_kernel:3.0.7 cpe:/o:linux:linux_kernel:3.0.8 cpe:/o:linux:linux_kernel:3.0.9 cpe:/o:linux:linux_kernel:3.0.10 cpe:/o:linux:linux_kernel:3.0.11 cpe:/o:linux:linux_kernel:3.0.12 cpe:/o:linux:linux_kernel:3.0.13 cpe:/o:linux:linux_kernel:3.0.14 cpe:/o:linux:linux_kernel:3.0.15 cpe:/o:linux:linux_kernel:3.0.16 cpe:/o:linux:linux_kernel:3.0.17 cpe:/o:linux:linux_kernel:3.0.18 cpe:/o:linux:linux_kernel:3.0.19 cpe:/o:linux:linux_kernel:3.0.20 cpe:/o:linux:linux_kernel:3.0.21 cpe:/o:linux:linux_kernel:3.0.22 cpe:/o:linux:linux_kernel:3.0.23 cpe:/o:linux:linux_kernel:3.0.24 cpe:/o:linux:linux_kernel:3.0.25 cpe:/o:linux:linux_kernel:3.0.26 cpe:/o:linux:linux_kernel:3.0.27 cpe:/o:linux:linux_kernel:3.0.28 cpe:/o:linux:linux_kernel:3.0.29 cpe:/o:linux:linux_kernel:3.0.30 cpe:/o:linux:linux_kernel:3.0.31 cpe:/o:linux:linux_kernel:3.0.32 cpe:/o:linux:linux_kernel:3.0.33 cpe:/o:linux:linux_kernel:3.0.34 cpe:/o:linux:linux_kernel:3.0.35 cpe:/o:linux:linux_kernel:3.0.36 cpe:/o:linux:linux_kernel:3.0.37 cpe:/o:linux:linux_kernel:3.0.38 cpe:/o:linux:linux_kernel:3.0.39 cpe:/o:linux:linux_kernel:3.0.40 cpe:/o:linux:linux_kernel:3.0.41 cpe:/o:linux:linux_kernel:3.0.42 cpe:/o:linux:linux_kernel:3.0.43 cpe:/o:linux:linux_kernel:3.0.44 cpe:/o:linux:linux_kernel:3.0.45 cpe:/o:linux:linux_kernel:3.0.46 cpe:/o:linux:linux_kernel:3.0.47 cpe:/o:linux:linux_kernel:3.0.48 cpe:/o:linux:linux_kernel:3.0.49 cpe:/o:linux:linux_kernel:3.0.50 cpe:/o:linux:linux_kernel:3.0.51 cpe:/o:linux:linux_kernel:3.0.52 cpe:/o:linux:linux_kernel:3.0.53 cpe:/o:linux:linux_kernel:3.0.54 cpe:/o:linux:linux_kernel:3.0.55 cpe:/o:linux:linux_kernel:3.0.56 cpe:/o:linux:linux_kernel:3.0.57 cpe:/o:linux:linux_kernel:3.0.58 cpe:/o:linux:linux_kernel:3.0.59 cpe:/o:linux:linux_kernel:3.0.60 cpe:/o:linux:linux_kernel:3.0.61 cpe:/o:linux:linux_kernel:3.0.62 cpe:/o:linux:linux_kernel:3.0.63 cpe:/o:linux:linux_kernel:3.0.64 cpe:/o:linux:linux_kernel:3.0.65 cpe:/o:linux:linux_kernel:3.0.66 cpe:/o:linux:linux_kernel:3.0.67 cpe:/o:linux:linux_kernel:3.0.68 cpe:/o:linux:linux_kernel:3.0.69 cpe:/o:linux:linux_kernel:3.0.70 cpe:/o:linux:linux_kernel:3.0.71 cpe:/o:linux:linux_kernel:3.0.72 cpe:/o:linux:linux_kernel:3.0.73 cpe:/o:linux:linux_kernel:3.0.74 cpe:/o:linux:linux_kernel:3.0.75 cpe:/o:linux:linux_kernel:3.0.76 cpe:/o:linux:linux_kernel:3.0.77 cpe:/o:linux:linux_kernel:3.0.78 cpe:/o:linux:linux_kernel:3.0.79 cpe:/o:linux:linux_kernel:3.0.80 cpe:/o:linux:linux_kernel:3.0.81 cpe:/o:linux:linux_kernel:3.0.82 cpe:/o:linux:linux_kernel:3.0.83 cpe:/o:linux:linux_kernel:3.0.84 cpe:/o:linux:linux_kernel:3.0.85 cpe:/o:linux:linux_kernel:3.0.86 cpe:/o:linux:linux_kernel:3.0.87 cpe:/o:linux:linux_kernel:3.0.88 cpe:/o:linux:linux_kernel:3.0.89 cpe:/o:linux:linux_kernel:3.0.90 cpe:/o:linux:linux_kernel:3.0.91 cpe:/o:linux:linux_kernel:3.0.92 cpe:/o:linux:linux_kernel:3.0.93 cpe:/o:linux:linux_kernel:3.0.94 cpe:/o:linux:linux_kernel:3.0.95 cpe:/o:linux:linux_kernel:3.0.96 cpe:/o:linux:linux_kernel:3.0.97 cpe:/o:linux:linux_kernel:3.0.98 cpe:/o:linux:linux_kernel:3.0.99 cpe:/o:linux:linux_kernel:3.0.100 cpe:/o:linux:linux_kernel:3.0.101 cpe:/o:linux:linux_kernel:3.1 cpe:/o:linux:linux_kernel:3.1:rc1 cpe:/o:linux:linux_kernel:3.1:rc2 cpe:/o:linux:linux_kernel:3.1:rc3 cpe:/o:linux:linux_kernel:3.1:rc4 cpe:/o:linux:linux_kernel:3.1.1 cpe:/o:linux:linux_kernel:3.1.2 cpe:/o:linux:linux_kernel:3.1.3 cpe:/o:linux:linux_kernel:3.1.4 cpe:/o:linux:linux_kernel:3.1.5 cpe:/o:linux:linux_kernel:3.1.6 cpe:/o:linux:linux_kernel:3.1.7 cpe:/o:linux:linux_kernel:3.1.8 cpe:/o:linux:linux_kernel:3.1.9 cpe:/o:linux:linux_kernel:3.1.10 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:3.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.2:rc2 cpe:/o:linux:linux_kernel:3.2:rc3 cpe:/o:linux:linux_kernel:3.2:rc4 cpe:/o:linux:linux_kernel:3.2:rc5 cpe:/o:linux:linux_kernel:3.2:rc6 cpe:/o:linux:linux_kernel:3.2:rc7 cpe:/o:linux:linux_kernel:3.2.1 cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.2.2 cpe:/o:linux:linux_kernel:3.2.3 cpe:/o:linux:linux_kernel:3.2.4 cpe:/o:linux:linux_kernel:3.2.5 cpe:/o:linux:linux_kernel:3.2.6 cpe:/o:linux:linux_kernel:3.2.7 cpe:/o:linux:linux_kernel:3.2.8 cpe:/o:linux:linux_kernel:3.2.9 cpe:/o:linux:linux_kernel:3.2.10 cpe:/o:linux:linux_kernel:3.2.11 cpe:/o:linux:linux_kernel:3.2.12 cpe:/o:linux:linux_kernel:3.2.13 cpe:/o:linux:linux_kernel:3.2.14 cpe:/o:linux:linux_kernel:3.2.15 cpe:/o:linux:linux_kernel:3.2.16 cpe:/o:linux:linux_kernel:3.2.17 cpe:/o:linux:linux_kernel:3.2.18 cpe:/o:linux:linux_kernel:3.2.19 cpe:/o:linux:linux_kernel:3.2.20 cpe:/o:linux:linux_kernel:3.2.21 cpe:/o:linux:linux_kernel:3.2.22 cpe:/o:linux:linux_kernel:3.2.23 cpe:/o:linux:linux_kernel:3.2.24 cpe:/o:linux:linux_kernel:3.2.25 cpe:/o:linux:linux_kernel:3.2.26 cpe:/o:linux:linux_kernel:3.2.27 cpe:/o:linux:linux_kernel:3.2.28 cpe:/o:linux:linux_kernel:3.2.29 cpe:/o:linux:linux_kernel:3.2.30 cpe:/o:linux:linux_kernel:3.2.31 cpe:/o:linux:linux_kernel:3.2.32 cpe:/o:linux:linux_kernel:3.2.33 cpe:/o:linux:linux_kernel:3.2.34 cpe:/o:linux:linux_kernel:3.2.35 cpe:/o:linux:linux_kernel:3.2.36 cpe:/o:linux:linux_kernel:3.2.37 cpe:/o:linux:linux_kernel:3.2.38 cpe:/o:linux:linux_kernel:3.2.39 cpe:/o:linux:linux_kernel:3.2.40 cpe:/o:linux:linux_kernel:3.2.41 cpe:/o:linux:linux_kernel:3.2.42 cpe:/o:linux:linux_kernel:3.2.43 cpe:/o:linux:linux_kernel:3.2.44 cpe:/o:linux:linux_kernel:3.2.45 cpe:/o:linux:linux_kernel:3.2.46 cpe:/o:linux:linux_kernel:3.2.47 cpe:/o:linux:linux_kernel:3.2.48 cpe:/o:linux:linux_kernel:3.2.49 cpe:/o:linux:linux_kernel:3.2.50 cpe:/o:linux:linux_kernel:3.2.51 cpe:/o:linux:linux_kernel:3.2.52 cpe:/o:linux:linux_kernel:3.2.53 cpe:/o:linux:linux_kernel:3.2.54 cpe:/o:linux:linux_kernel:3.2.55 cpe:/o:linux:linux_kernel:3.2.56 cpe:/o:linux:linux_kernel:3.2.57 cpe:/o:linux:linux_kernel:3.2.58 cpe:/o:linux:linux_kernel:3.2.59 cpe:/o:linux:linux_kernel:3.2.60 cpe:/o:linux:linux_kernel:3.2.61 cpe:/o:linux:linux_kernel:3.2.62 cpe:/o:linux:linux_kernel:3.2.63 cpe:/o:linux:linux_kernel:3.2.64 cpe:/o:linux:linux_kernel:3.2.65 cpe:/o:linux:linux_kernel:3.2.66 cpe:/o:linux:linux_kernel:3.2.67 cpe:/o:linux:linux_kernel:3.2.68 cpe:/o:linux:linux_kernel:3.2.69 cpe:/o:linux:linux_kernel:3.2.70 cpe:/o:linux:linux_kernel:3.2.71 cpe:/o:linux:linux_kernel:3.2.72 cpe:/o:linux:linux_kernel:3.2.73 cpe:/o:linux:linux_kernel:3.2.74 cpe:/o:linux:linux_kernel:3.2.75 cpe:/o:linux:linux_kernel:3.2.76 cpe:/o:linux:linux_kernel:3.2.77 cpe:/o:linux:linux_kernel:3.2.78 cpe:/o:linux:linux_kernel:3.2.79 cpe:/o:linux:linux_kernel:3.2.80 cpe:/o:linux:linux_kernel:3.3 cpe:/o:linux:linux_kernel:3.3:rc1 cpe:/o:linux:linux_kernel:3.3:rc2 cpe:/o:linux:linux_kernel:3.3:rc3 cpe:/o:linux:linux_kernel:3.3:rc4 cpe:/o:linux:linux_kernel:3.3:rc5 cpe:/o:linux:linux_kernel:3.3:rc6 cpe:/o:linux:linux_kernel:3.3:rc7 cpe:/o:linux:linux_kernel:3.3.1 cpe:/o:linux:linux_kernel:3.3.2 cpe:/o:linux:linux_kernel:3.3.3 cpe:/o:linux:linux_kernel:3.3.4 cpe:/o:linux:linux_kernel:3.3.5 cpe:/o:linux:linux_kernel:3.3.6 cpe:/o:linux:linux_kernel:3.3.7 cpe:/o:linux:linux_kernel:3.3.8 cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc1 cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc2 cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc3 cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc4 cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc5 cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc6 cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc7 cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~ cpe:/o:linux:linux_kernel:3.4.1 cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.2 cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.3 cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.4 cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.5 cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.6 cpe:/o:linux:linux_kernel:3.4.7 cpe:/o:linux:linux_kernel:3.4.8 cpe:/o:linux:linux_kernel:3.4.9 cpe:/o:linux:linux_kernel:3.4.10 cpe:/o:linux:linux_kernel:3.4.11 cpe:/o:linux:linux_kernel:3.4.12 cpe:/o:linux:linux_kernel:3.4.13 cpe:/o:linux:linux_kernel:3.4.14 cpe:/o:linux:linux_kernel:3.4.15 cpe:/o:linux:linux_kernel:3.4.16 cpe:/o:linux:linux_kernel:3.4.17 cpe:/o:linux:linux_kernel:3.4.18 cpe:/o:linux:linux_kernel:3.4.19 cpe:/o:linux:linux_kernel:3.4.20 cpe:/o:linux:linux_kernel:3.4.21 cpe:/o:linux:linux_kernel:3.4.22 cpe:/o:linux:linux_kernel:3.4.23 cpe:/o:linux:linux_kernel:3.4.24 cpe:/o:linux:linux_kernel:3.4.25 cpe:/o:linux:linux_kernel:3.4.26 cpe:/o:linux:linux_kernel:3.4.27 cpe:/o:linux:linux_kernel:3.4.28 cpe:/o:linux:linux_kernel:3.4.29 cpe:/o:linux:linux_kernel:3.4.30 cpe:/o:linux:linux_kernel:3.4.31 cpe:/o:linux:linux_kernel:3.4.32 cpe:/o:linux:linux_kernel:3.4.33 cpe:/o:linux:linux_kernel:3.4.34 cpe:/o:linux:linux_kernel:3.4.35 cpe:/o:linux:linux_kernel:3.4.36 cpe:/o:linux:linux_kernel:3.4.37 cpe:/o:linux:linux_kernel:3.4.38 cpe:/o:linux:linux_kernel:3.4.39 cpe:/o:linux:linux_kernel:3.4.40 cpe:/o:linux:linux_kernel:3.4.41 cpe:/o:linux:linux_kernel:3.4.42 cpe:/o:linux:linux_kernel:3.4.43 cpe:/o:linux:linux_kernel:3.4.44 cpe:/o:linux:linux_kernel:3.4.45 cpe:/o:linux:linux_kernel:3.4.46 cpe:/o:linux:linux_kernel:3.4.47 cpe:/o:linux:linux_kernel:3.4.48 cpe:/o:linux:linux_kernel:3.4.49 cpe:/o:linux:linux_kernel:3.4.50 cpe:/o:linux:linux_kernel:3.4.51 cpe:/o:linux:linux_kernel:3.4.52 cpe:/o:linux:linux_kernel:3.4.53 cpe:/o:linux:linux_kernel:3.4.54 cpe:/o:linux:linux_kernel:3.4.55 cpe:/o:linux:linux_kernel:3.4.56 cpe:/o:linux:linux_kernel:3.4.57 cpe:/o:linux:linux_kernel:3.4.58 cpe:/o:linux:linux_kernel:3.4.59 cpe:/o:linux:linux_kernel:3.4.60 cpe:/o:linux:linux_kernel:3.4.61 cpe:/o:linux:linux_kernel:3.4.62 cpe:/o:linux:linux_kernel:3.4.63 cpe:/o:linux:linux_kernel:3.4.64 cpe:/o:linux:linux_kernel:3.4.65 cpe:/o:linux:linux_kernel:3.4.66 cpe:/o:linux:linux_kernel:3.4.67 cpe:/o:linux:linux_kernel:3.4.68 cpe:/o:linux:linux_kernel:3.4.69 cpe:/o:linux:linux_kernel:3.4.70 cpe:/o:linux:linux_kernel:3.4.71 cpe:/o:linux:linux_kernel:3.4.72 cpe:/o:linux:linux_kernel:3.4.73 cpe:/o:linux:linux_kernel:3.4.74 cpe:/o:linux:linux_kernel:3.4.75 cpe:/o:linux:linux_kernel:3.4.76 cpe:/o:linux:linux_kernel:3.4.77 cpe:/o:linux:linux_kernel:3.4.78 cpe:/o:linux:linux_kernel:3.4.79 cpe:/o:linux:linux_kernel:3.4.80 cpe:/o:linux:linux_kernel:3.4.81 cpe:/o:linux:linux_kernel:3.4.82 cpe:/o:linux:linux_kernel:3.4.83 cpe:/o:linux:linux_kernel:3.4.84 cpe:/o:linux:linux_kernel:3.4.85 cpe:/o:linux:linux_kernel:3.4.86 cpe:/o:linux:linux_kernel:3.4.87 cpe:/o:linux:linux_kernel:3.4.88 cpe:/o:linux:linux_kernel:3.4.89 cpe:/o:linux:linux_kernel:3.4.90 cpe:/o:linux:linux_kernel:3.4.91 cpe:/o:linux:linux_kernel:3.4.92 cpe:/o:linux:linux_kernel:3.4.93 cpe:/o:linux:linux_kernel:3.4.94 cpe:/o:linux:linux_kernel:3.4.95 cpe:/o:linux:linux_kernel:3.4.96 cpe:/o:linux:linux_kernel:3.4.97 cpe:/o:linux:linux_kernel:3.4.98 cpe:/o:linux:linux_kernel:3.4.99 cpe:/o:linux:linux_kernel:3.4.100 cpe:/o:linux:linux_kernel:3.4.101 cpe:/o:linux:linux_kernel:3.4.102 cpe:/o:linux:linux_kernel:3.4.103 cpe:/o:linux:linux_kernel:3.4.104 cpe:/o:linux:linux_kernel:3.4.105 cpe:/o:linux:linux_kernel:3.4.106 cpe:/o:linux:linux_kernel:3.4.107 cpe:/o:linux:linux_kernel:3.4.108 cpe:/o:linux:linux_kernel:3.4.109 cpe:/o:linux:linux_kernel:3.4.110 cpe:/o:linux:linux_kernel:3.4.111 cpe:/o:linux:linux_kernel:3.4.112 cpe:/o:linux:linux_kernel:3.5.1 cpe:/o:linux:linux_kernel:3.5.2 cpe:/o:linux:linux_kernel:3.5.3 cpe:/o:linux:linux_kernel:3.5.4 cpe:/o:linux:linux_kernel:3.5.5 cpe:/o:linux:linux_kernel:3.5.6 cpe:/o:linux:linux_kernel:3.5.7 cpe:/o:linux:linux_kernel:3.6 cpe:/o:linux:linux_kernel:3.6.1 cpe:/o:linux:linux_kernel:3.6.2 cpe:/o:linux:linux_kernel:3.6.3 cpe:/o:linux:linux_kernel:3.6.4 cpe:/o:linux:linux_kernel:3.6.5 cpe:/o:linux:linux_kernel:3.6.6 cpe:/o:linux:linux_kernel:3.6.7 cpe:/o:linux:linux_kernel:3.6.8 cpe:/o:linux:linux_kernel:3.6.9 cpe:/o:linux:linux_kernel:3.6.10 cpe:/o:linux:linux_kernel:3.6.11 cpe:/o:linux:linux_kernel:3.7 cpe:/o:linux:linux_kernel:3.7.1 cpe:/o:linux:linux_kernel:3.7.2 cpe:/o:linux:linux_kernel:3.7.3 cpe:/o:linux:linux_kernel:3.7.4 cpe:/o:linux:linux_kernel:3.7.5 cpe:/o:linux:linux_kernel:3.7.6 cpe:/o:linux:linux_kernel:3.7.7 cpe:/o:linux:linux_kernel:3.7.8 cpe:/o:linux:linux_kernel:3.7.9 cpe:/o:linux:linux_kernel:3.7.10 cpe:/o:linux:linux_kernel:3.8.0 cpe:/o:linux:linux_kernel:3.8.1 cpe:/o:linux:linux_kernel:3.8.2 cpe:/o:linux:linux_kernel:3.8.3 cpe:/o:linux:linux_kernel:3.8.4 cpe:/o:linux:linux_kernel:3.8.5 cpe:/o:linux:linux_kernel:3.8.6 cpe:/o:linux:linux_kernel:3.8.7 cpe:/o:linux:linux_kernel:3.8.8 cpe:/o:linux:linux_kernel:3.8.9 cpe:/o:linux:linux_kernel:3.8.10 cpe:/o:linux:linux_kernel:3.8.11 cpe:/o:linux:linux_kernel:3.8.12 cpe:/o:linux:linux_kernel:3.8.13 cpe:/o:linux:linux_kernel:3.9:rc1 cpe:/o:linux:linux_kernel:3.9:rc2 cpe:/o:linux:linux_kernel:3.9:rc3 cpe:/o:linux:linux_kernel:3.9:rc4 cpe:/o:linux:linux_kernel:3.9:rc5 cpe:/o:linux:linux_kernel:3.9:rc6 cpe:/o:linux:linux_kernel:3.9:rc7 cpe:/o:linux:linux_kernel:3.9.0 cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.1 cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.2 cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.3 cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.4 cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.5 cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.6 cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.7 cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.8 cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.9 cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.10 cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.11 cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.1 cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.2 cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.3 cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.4 cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.5 cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.6 cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.7 cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.8 cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.9 cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.10 cpe:/o:linux:linux_kernel:3.10.11 cpe:/o:linux:linux_kernel:3.10.12 cpe:/o:linux:linux_kernel:3.10.13 cpe:/o:linux:linux_kernel:3.10.14 cpe:/o:linux:linux_kernel:3.10.15 cpe:/o:linux:linux_kernel:3.10.16 cpe:/o:linux:linux_kernel:3.10.17 cpe:/o:linux:linux_kernel:3.10.18 cpe:/o:linux:linux_kernel:3.10.19 cpe:/o:linux:linux_kernel:3.10.20 cpe:/o:linux:linux_kernel:3.10.21 cpe:/o:linux:linux_kernel:3.10.22 cpe:/o:linux:linux_kernel:3.10.23 cpe:/o:linux:linux_kernel:3.10.24 cpe:/o:linux:linux_kernel:3.10.25 cpe:/o:linux:linux_kernel:3.10.26 cpe:/o:linux:linux_kernel:3.10.27 cpe:/o:linux:linux_kernel:3.10.28 cpe:/o:linux:linux_kernel:3.10.29 cpe:/o:linux:linux_kernel:3.10.30 cpe:/o:linux:linux_kernel:3.10.31 cpe:/o:linux:linux_kernel:3.10.32 cpe:/o:linux:linux_kernel:3.10.33 cpe:/o:linux:linux_kernel:3.10.34 cpe:/o:linux:linux_kernel:3.10.35 cpe:/o:linux:linux_kernel:3.10.36 cpe:/o:linux:linux_kernel:3.10.37 cpe:/o:linux:linux_kernel:3.10.38 cpe:/o:linux:linux_kernel:3.10.39 cpe:/o:linux:linux_kernel:3.10.40 cpe:/o:linux:linux_kernel:3.10.41 cpe:/o:linux:linux_kernel:3.10.42 cpe:/o:linux:linux_kernel:3.10.43 cpe:/o:linux:linux_kernel:3.10.44 cpe:/o:linux:linux_kernel:3.10.45 cpe:/o:linux:linux_kernel:3.10.46 cpe:/o:linux:linux_kernel:3.10.47 cpe:/o:linux:linux_kernel:3.10.48 cpe:/o:linux:linux_kernel:3.10.49 cpe:/o:linux:linux_kernel:3.10.50 cpe:/o:linux:linux_kernel:3.10.51 cpe:/o:linux:linux_kernel:3.10.52 cpe:/o:linux:linux_kernel:3.10.53 cpe:/o:linux:linux_kernel:3.10.54 cpe:/o:linux:linux_kernel:3.10.55 cpe:/o:linux:linux_kernel:3.10.56 cpe:/o:linux:linux_kernel:3.10.57 cpe:/o:linux:linux_kernel:3.10.58 cpe:/o:linux:linux_kernel:3.10.59 cpe:/o:linux:linux_kernel:3.10.60 cpe:/o:linux:linux_kernel:3.10.61 cpe:/o:linux:linux_kernel:3.10.62 cpe:/o:linux:linux_kernel:3.10.63 cpe:/o:linux:linux_kernel:3.10.64 cpe:/o:linux:linux_kernel:3.10.65 cpe:/o:linux:linux_kernel:3.10.66 cpe:/o:linux:linux_kernel:3.10.67 cpe:/o:linux:linux_kernel:3.10.68 cpe:/o:linux:linux_kernel:3.10.69 cpe:/o:linux:linux_kernel:3.10.70 cpe:/o:linux:linux_kernel:3.10.71 cpe:/o:linux:linux_kernel:3.10.72 cpe:/o:linux:linux_kernel:3.10.73 cpe:/o:linux:linux_kernel:3.10.74 cpe:/o:linux:linux_kernel:3.10.75 cpe:/o:linux:linux_kernel:3.10.76 cpe:/o:linux:linux_kernel:3.10.77 cpe:/o:linux:linux_kernel:3.10.78 cpe:/o:linux:linux_kernel:3.10.79 cpe:/o:linux:linux_kernel:3.10.80 cpe:/o:linux:linux_kernel:3.10.81 cpe:/o:linux:linux_kernel:3.10.82 cpe:/o:linux:linux_kernel:3.10.83 cpe:/o:linux:linux_kernel:3.10.84 cpe:/o:linux:linux_kernel:3.10.85 cpe:/o:linux:linux_kernel:3.10.86 cpe:/o:linux:linux_kernel:3.10.87 cpe:/o:linux:linux_kernel:3.10.88 cpe:/o:linux:linux_kernel:3.10.89 cpe:/o:linux:linux_kernel:3.10.90 cpe:/o:linux:linux_kernel:3.10.91 cpe:/o:linux:linux_kernel:3.10.92 cpe:/o:linux:linux_kernel:3.10.93 cpe:/o:linux:linux_kernel:3.10.94 cpe:/o:linux:linux_kernel:3.10.95 cpe:/o:linux:linux_kernel:3.10.96 cpe:/o:linux:linux_kernel:3.10.97 cpe:/o:linux:linux_kernel:3.10.98 cpe:/o:linux:linux_kernel:3.10.99 cpe:/o:linux:linux_kernel:3.10.100 cpe:/o:linux:linux_kernel:3.10.101 cpe:/o:linux:linux_kernel:3.11 cpe:/o:linux:linux_kernel:3.11.1 cpe:/o:linux:linux_kernel:3.11.2 cpe:/o:linux:linux_kernel:3.11.3 cpe:/o:linux:linux_kernel:3.11.4 cpe:/o:linux:linux_kernel:3.11.5 cpe:/o:linux:linux_kernel:3.11.6 cpe:/o:linux:linux_kernel:3.11.7 cpe:/o:linux:linux_kernel:3.11.8 cpe:/o:linux:linux_kernel:3.11.9 cpe:/o:linux:linux_kernel:3.11.10 cpe:/o:linux:linux_kernel:3.12 cpe:/o:linux:linux_kernel:3.12.1 cpe:/o:linux:linux_kernel:3.12.2 cpe:/o:linux:linux_kernel:3.12.3 cpe:/o:linux:linux_kernel:3.12.4 cpe:/o:linux:linux_kernel:3.12.5 cpe:/o:linux:linux_kernel:3.12.6 cpe:/o:linux:linux_kernel:3.12.7 cpe:/o:linux:linux_kernel:3.12.8 cpe:/o:linux:linux_kernel:3.12.9 cpe:/o:linux:linux_kernel:3.12.10 cpe:/o:linux:linux_kernel:3.12.11 cpe:/o:linux:linux_kernel:3.12.12 cpe:/o:linux:linux_kernel:3.12.13 cpe:/o:linux:linux_kernel:3.12.14 cpe:/o:linux:linux_kernel:3.12.15 cpe:/o:linux:linux_kernel:3.12.16 cpe:/o:linux:linux_kernel:3.12.17 cpe:/o:linux:linux_kernel:3.12.18 cpe:/o:linux:linux_kernel:3.12.19 cpe:/o:linux:linux_kernel:3.12.20 cpe:/o:linux:linux_kernel:3.12.21 cpe:/o:linux:linux_kernel:3.12.22 cpe:/o:linux:linux_kernel:3.12.23 cpe:/o:linux:linux_kernel:3.12.24 cpe:/o:linux:linux_kernel:3.12.25 cpe:/o:linux:linux_kernel:3.12.26 cpe:/o:linux:linux_kernel:3.12.27 cpe:/o:linux:linux_kernel:3.12.28 cpe:/o:linux:linux_kernel:3.12.29 cpe:/o:linux:linux_kernel:3.12.30 cpe:/o:linux:linux_kernel:3.12.31 cpe:/o:linux:linux_kernel:3.12.32 cpe:/o:linux:linux_kernel:3.12.33 cpe:/o:linux:linux_kernel:3.12.34 cpe:/o:linux:linux_kernel:3.12.35 cpe:/o:linux:linux_kernel:3.12.36 cpe:/o:linux:linux_kernel:3.12.37 cpe:/o:linux:linux_kernel:3.12.38 cpe:/o:linux:linux_kernel:3.12.39 cpe:/o:linux:linux_kernel:3.12.40 cpe:/o:linux:linux_kernel:3.12.41 cpe:/o:linux:linux_kernel:3.12.42 cpe:/o:linux:linux_kernel:3.12.43 cpe:/o:linux:linux_kernel:3.12.44 cpe:/o:linux:linux_kernel:3.12.45 cpe:/o:linux:linux_kernel:3.12.46 cpe:/o:linux:linux_kernel:3.12.47 cpe:/o:linux:linux_kernel:3.12.48 cpe:/o:linux:linux_kernel:3.12.49 cpe:/o:linux:linux_kernel:3.12.50 cpe:/o:linux:linux_kernel:3.12.51 cpe:/o:linux:linux_kernel:3.12.52 cpe:/o:linux:linux_kernel:3.12.53 cpe:/o:linux:linux_kernel:3.12.54 cpe:/o:linux:linux_kernel:3.12.55 cpe:/o:linux:linux_kernel:3.12.56 cpe:/o:linux:linux_kernel:3.12.57 cpe:/o:linux:linux_kernel:3.12.58 cpe:/o:linux:linux_kernel:3.12.59 cpe:/o:linux:linux_kernel:3.13 cpe:/o:linux:linux_kernel:3.13.1 cpe:/o:linux:linux_kernel:3.13.2 cpe:/o:linux:linux_kernel:3.13.3 cpe:/o:linux:linux_kernel:3.13.4 cpe:/o:linux:linux_kernel:3.13.5 cpe:/o:linux:linux_kernel:3.13.6 cpe:/o:linux:linux_kernel:3.13.7 cpe:/o:linux:linux_kernel:3.13.8 cpe:/o:linux:linux_kernel:3.13.9 cpe:/o:linux:linux_kernel:3.13.10 cpe:/o:linux:linux_kernel:3.13.11 cpe:/o:linux:linux_kernel:3.14:- cpe:/o:linux:linux_kernel:3.14:rc1 cpe:/o:linux:linux_kernel:3.14:rc2 cpe:/o:linux:linux_kernel:3.14:rc3 cpe:/o:linux:linux_kernel:3.14:rc4 cpe:/o:linux:linux_kernel:3.14:rc5 cpe:/o:linux:linux_kernel:3.14:rc6 cpe:/o:linux:linux_kernel:3.14:rc7 cpe:/o:linux:linux_kernel:3.14:rc8 cpe:/o:linux:linux_kernel:3.14.1 cpe:/o:linux:linux_kernel:3.14.2 cpe:/o:linux:linux_kernel:3.14.3 cpe:/o:linux:linux_kernel:3.14.4 cpe:/o:linux:linux_kernel:3.14.5 cpe:/o:linux:linux_kernel:3.14.6 cpe:/o:linux:linux_kernel:3.14.7 cpe:/o:linux:linux_kernel:3.14.8 cpe:/o:linux:linux_kernel:3.14.10 cpe:/o:linux:linux_kernel:3.14.11 cpe:/o:linux:linux_kernel:3.14.12 cpe:/o:linux:linux_kernel:3.14.13 cpe:/o:linux:linux_kernel:3.14.14 cpe:/o:linux:linux_kernel:3.14.15 cpe:/o:linux:linux_kernel:3.14.16 cpe:/o:linux:linux_kernel:3.14.17 cpe:/o:linux:linux_kernel:3.14.18 cpe:/o:linux:linux_kernel:3.14.19 cpe:/o:linux:linux_kernel:3.14.20 cpe:/o:linux:linux_kernel:3.14.21 cpe:/o:linux:linux_kernel:3.14.22 cpe:/o:linux:linux_kernel:3.14.23 cpe:/o:linux:linux_kernel:3.14.24 cpe:/o:linux:linux_kernel:3.14.25 cpe:/o:linux:linux_kernel:3.14.26 cpe:/o:linux:linux_kernel:3.14.27 cpe:/o:linux:linux_kernel:3.14.28 cpe:/o:linux:linux_kernel:3.14.29 cpe:/o:linux:linux_kernel:3.14.30 cpe:/o:linux:linux_kernel:3.14.31 cpe:/o:linux:linux_kernel:3.14.32 cpe:/o:linux:linux_kernel:3.14.33 cpe:/o:linux:linux_kernel:3.14.34 cpe:/o:linux:linux_kernel:3.14.35 cpe:/o:linux:linux_kernel:3.14.36 cpe:/o:linux:linux_kernel:3.14.37 cpe:/o:linux:linux_kernel:3.14.38 cpe:/o:linux:linux_kernel:3.14.39 cpe:/o:linux:linux_kernel:3.14.40 cpe:/o:linux:linux_kernel:3.14.41 cpe:/o:linux:linux_kernel:3.14.42 cpe:/o:linux:linux_kernel:3.14.43 cpe:/o:linux:linux_kernel:3.14.44 cpe:/o:linux:linux_kernel:3.14.45 cpe:/o:linux:linux_kernel:3.14.46 cpe:/o:linux:linux_kernel:3.14.47 cpe:/o:linux:linux_kernel:3.14.48 cpe:/o:linux:linux_kernel:3.14.49 cpe:/o:linux:linux_kernel:3.14.50 cpe:/o:linux:linux_kernel:3.14.51 cpe:/o:linux:linux_kernel:3.14.52 cpe:/o:linux:linux_kernel:3.14.53 cpe:/o:linux:linux_kernel:3.14.54 cpe:/o:linux:linux_kernel:3.14.55 cpe:/o:linux:linux_kernel:3.14.56 cpe:/o:linux:linux_kernel:3.14.57 cpe:/o:linux:linux_kernel:3.14.58 cpe:/o:linux:linux_kernel:3.14.59 cpe:/o:linux:linux_kernel:3.14.60 cpe:/o:linux:linux_kernel:3.14.61 cpe:/o:linux:linux_kernel:3.14.62 cpe:/o:linux:linux_kernel:3.14.63 cpe:/o:linux:linux_kernel:3.14.64 cpe:/o:linux:linux_kernel:3.14.65 cpe:/o:linux:linux_kernel:3.14.66 cpe:/o:linux:linux_kernel:3.14.67 cpe:/o:linux:linux_kernel:3.14.68 cpe:/o:linux:linux_kernel:3.15 cpe:/o:linux:linux_kernel:3.15.1 cpe:/o:linux:linux_kernel:3.15.2 cpe:/o:linux:linux_kernel:3.15.3 cpe:/o:linux:linux_kernel:3.15.4 cpe:/o:linux:linux_kernel:3.15.5 cpe:/o:linux:linux_kernel:3.15.6 cpe:/o:linux:linux_kernel:3.15.7 cpe:/o:linux:linux_kernel:3.15.8 cpe:/o:linux:linux_kernel:3.15.10 cpe:/o:linux:linux_kernel:3.16.0 cpe:/o:linux:linux_kernel:3.16.1 cpe:/o:linux:linux_kernel:3.16.2 cpe:/o:linux:linux_kernel:3.16.3 cpe:/o:linux:linux_kernel:3.16.4 cpe:/o:linux:linux_kernel:3.16.5 cpe:/o:linux:linux_kernel:3.16.6 cpe:/o:linux:linux_kernel:3.16.7 cpe:/o:linux:linux_kernel:3.17.1 cpe:/o:linux:linux_kernel:3.17.2 cpe:/o:linux:linux_kernel:3.17.3 cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.17.4 cpe:/o:linux:linux_kernel:3.17.5 cpe:/o:linux:linux_kernel:3.17.6 cpe:/o:linux:linux_kernel:3.17.7 cpe:/o:linux:linux_kernel:3.17.8 cpe:/o:linux:linux_kernel:3.18.0 cpe:/o:linux:linux_kernel:3.18.1 cpe:/o:linux:linux_kernel:3.18.2 cpe:/o:linux:linux_kernel:3.18.3 cpe:/o:linux:linux_kernel:3.18.4 cpe:/o:linux:linux_kernel:3.18.5 cpe:/o:linux:linux_kernel:3.18.6 cpe:/o:linux:linux_kernel:3.18.7 cpe:/o:linux:linux_kernel:3.18.8 cpe:/o:linux:linux_kernel:3.18.9 cpe:/o:linux:linux_kernel:3.18.10 cpe:/o:linux:linux_kernel:3.18.11 cpe:/o:linux:linux_kernel:3.18.12 cpe:/o:linux:linux_kernel:3.18.13 cpe:/o:linux:linux_kernel:3.18.14 cpe:/o:linux:linux_kernel:3.18.15 cpe:/o:linux:linux_kernel:3.18.16 cpe:/o:linux:linux_kernel:3.18.17 cpe:/o:linux:linux_kernel:3.18.18 cpe:/o:linux:linux_kernel:3.18.19 cpe:/o:linux:linux_kernel:3.18.20 cpe:/o:linux:linux_kernel:3.18.21 cpe:/o:linux:linux_kernel:3.18.22 cpe:/o:linux:linux_kernel:3.18.23 cpe:/o:linux:linux_kernel:3.18.24 cpe:/o:linux:linux_kernel:3.18.25 cpe:/o:linux:linux_kernel:3.18.26 cpe:/o:linux:linux_kernel:3.18.27 cpe:/o:linux:linux_kernel:3.18.28 cpe:/o:linux:linux_kernel:3.18.29 cpe:/o:linux:linux_kernel:3.18.30 cpe:/o:linux:linux_kernel:3.18.31 cpe:/o:linux:linux_kernel:3.18.32 cpe:/o:linux:linux_kernel:3.19 cpe:/o:linux:linux_kernel:3.19.1 cpe:/o:linux:linux_kernel:3.19.2 cpe:/o:linux:linux_kernel:3.19.3 cpe:/o:linux:linux_kernel:3.19.4 cpe:/o:linux:linux_kernel:3.19.5 cpe:/o:linux:linux_kernel:3.19.6 cpe:/o:linux:linux_kernel:3.19.7 cpe:/o:linux:linux_kernel:3.19.8 cpe:/o:linux:linux_kernel:4.0.0 cpe:/o:linux:linux_kernel:4.0.1 cpe:/o:linux:linux_kernel:4.0.2 cpe:/o:linux:linux_kernel:4.0.3 cpe:/o:linux:linux_kernel:4.0.4 cpe:/o:linux:linux_kernel:4.0.5 cpe:/o:linux:linux_kernel:4.0.6 cpe:/o:linux:linux_kernel:4.0.7 cpe:/o:linux:linux_kernel:4.0.8 cpe:/o:linux:linux_kernel:4.0.9 cpe:/o:linux:linux_kernel:4.1.0 cpe:/o:linux:linux_kernel:4.1.1 cpe:/o:linux:linux_kernel:4.1.2 cpe:/o:linux:linux_kernel:4.1.3 cpe:/o:linux:linux_kernel:4.1.4 cpe:/o:linux:linux_kernel:4.1.5 cpe:/o:linux:linux_kernel:4.1.6 cpe:/o:linux:linux_kernel:4.1.7 cpe:/o:linux:linux_kernel:4.1.8 cpe:/o:linux:linux_kernel:4.1.9 cpe:/o:linux:linux_kernel:4.1.10 cpe:/o:linux:linux_kernel:4.1.11 cpe:/o:linux:linux_kernel:4.1.12 cpe:/o:linux:linux_kernel:4.1.13 cpe:/o:linux:linux_kernel:4.1.14 cpe:/o:linux:linux_kernel:4.1.15 cpe:/o:linux:linux_kernel:4.1.16 cpe:/o:linux:linux_kernel:4.1.17 cpe:/o:linux:linux_kernel:4.1.18 cpe:/o:linux:linux_kernel:4.1.19 cpe:/o:linux:linux_kernel:4.1.20 cpe:/o:linux:linux_kernel:4.1.21 cpe:/o:linux:linux_kernel:4.1.22 cpe:/o:linux:linux_kernel:4.1.23 cpe:/o:linux:linux_kernel:4.2.0 cpe:/o:linux:linux_kernel:4.2.1 cpe:/o:linux:linux_kernel:4.2.2 cpe:/o:linux:linux_kernel:4.2.3 cpe:/o:linux:linux_kernel:4.2.4 cpe:/o:linux:linux_kernel:4.2.5 cpe:/o:linux:linux_kernel:4.2.6 cpe:/o:linux:linux_kernel:4.2.7 cpe:/o:linux:linux_kernel:4.2.8 cpe:/o:linux:linux_kernel:4.3.0 cpe:/o:linux:linux_kernel:4.3.1 cpe:/o:linux:linux_kernel:4.3.2 cpe:/o:linux:linux_kernel:4.3.3 cpe:/o:linux:linux_kernel:4.3.4 cpe:/o:linux:linux_kernel:4.3.5 cpe:/o:linux:linux_kernel:4.3.6 cpe:/o:linux:linux_kernel:4.4.0 cpe:/o:linux:linux_kernel:4.4.1 cpe:/o:linux:linux_kernel:4.4.2 cpe:/o:linux:linux_kernel:4.4.3 cpe:/o:linux:linux_kernel:4.4.4 cpe:/o:linux:linux_kernel:4.4.5 cpe:/o:linux:linux_kernel:4.4.6 cpe:/o:linux:linux_kernel:4.4.7 cpe:/o:linux:linux_kernel:4.4.8 cpe:/o:linux:linux_kernel:4.4.9 cpe:/o:linux:linux_kernel:4.5.0 cpe:/o:linux:linux_kernel:4.5.1 cpe:/o:linux:linux_kernel:4.5.2 cpe:/o:linux:linux_kernel:4.5.3

CVE-2015-0570

2016-05-09T06:59:01.267-04:00

2016-11-28T14:16:56.783-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://source.android.com/security/bulletin/2016-05-01.html BID 77691 CONFIRM https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015 Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafted application that uses a long WPS IE element.

cpe:/o:linux:linux_kernel:3.0:rc1 cpe:/o:linux:linux_kernel:3.0:rc2 cpe:/o:linux:linux_kernel:3.0:rc3 cpe:/o:linux:linux_kernel:3.0:rc4 cpe:/o:linux:linux_kernel:3.0:rc5 cpe:/o:linux:linux_kernel:3.0:rc6 cpe:/o:linux:linux_kernel:3.0:rc7 cpe:/o:linux:linux_kernel:3.0.1 cpe:/o:linux:linux_kernel:3.0.2 cpe:/o:linux:linux_kernel:3.0.3 cpe:/o:linux:linux_kernel:3.0.4 cpe:/o:linux:linux_kernel:3.0.5 cpe:/o:linux:linux_kernel:3.0.6 cpe:/o:linux:linux_kernel:3.0.7 cpe:/o:linux:linux_kernel:3.0.8 cpe:/o:linux:linux_kernel:3.0.9 cpe:/o:linux:linux_kernel:3.0.10 cpe:/o:linux:linux_kernel:3.0.11 cpe:/o:linux:linux_kernel:3.0.12 cpe:/o:linux:linux_kernel:3.0.13 cpe:/o:linux:linux_kernel:3.0.14 cpe:/o:linux:linux_kernel:3.0.15 cpe:/o:linux:linux_kernel:3.0.16 cpe:/o:linux:linux_kernel:3.0.17 cpe:/o:linux:linux_kernel:3.0.18 cpe:/o:linux:linux_kernel:3.0.19 cpe:/o:linux:linux_kernel:3.0.20 cpe:/o:linux:linux_kernel:3.0.21 cpe:/o:linux:linux_kernel:3.0.22 cpe:/o:linux:linux_kernel:3.0.23 cpe:/o:linux:linux_kernel:3.0.24 cpe:/o:linux:linux_kernel:3.0.25 cpe:/o:linux:linux_kernel:3.0.26 cpe:/o:linux:linux_kernel:3.0.27 cpe:/o:linux:linux_kernel:3.0.28 cpe:/o:linux:linux_kernel:3.0.29 cpe:/o:linux:linux_kernel:3.0.30 cpe:/o:linux:linux_kernel:3.0.31 cpe:/o:linux:linux_kernel:3.0.32 cpe:/o:linux:linux_kernel:3.0.33 cpe:/o:linux:linux_kernel:3.0.34 cpe:/o:linux:linux_kernel:3.0.35 cpe:/o:linux:linux_kernel:3.0.36 cpe:/o:linux:linux_kernel:3.0.37 cpe:/o:linux:linux_kernel:3.0.38 cpe:/o:linux:linux_kernel:3.0.39 cpe:/o:linux:linux_kernel:3.0.40 cpe:/o:linux:linux_kernel:3.0.41 cpe:/o:linux:linux_kernel:3.0.42 cpe:/o:linux:linux_kernel:3.0.43 cpe:/o:linux:linux_kernel:3.0.44 cpe:/o:linux:linux_kernel:3.0.45 cpe:/o:linux:linux_kernel:3.0.46 cpe:/o:linux:linux_kernel:3.0.47 cpe:/o:linux:linux_kernel:3.0.48 cpe:/o:linux:linux_kernel:3.0.49 cpe:/o:linux:linux_kernel:3.0.50 cpe:/o:linux:linux_kernel:3.0.51 cpe:/o:linux:linux_kernel:3.0.52 cpe:/o:linux:linux_kernel:3.0.53 cpe:/o:linux:linux_kernel:3.0.54 cpe:/o:linux:linux_kernel:3.0.55 cpe:/o:linux:linux_kernel:3.0.56 cpe:/o:linux:linux_kernel:3.0.57 cpe:/o:linux:linux_kernel:3.0.58 cpe:/o:linux:linux_kernel:3.0.59 cpe:/o:linux:linux_kernel:3.0.60 cpe:/o:linux:linux_kernel:3.0.61 cpe:/o:linux:linux_kernel:3.0.62 cpe:/o:linux:linux_kernel:3.0.63 cpe:/o:linux:linux_kernel:3.0.64 cpe:/o:linux:linux_kernel:3.0.65 cpe:/o:linux:linux_kernel:3.0.66 cpe:/o:linux:linux_kernel:3.0.67 cpe:/o:linux:linux_kernel:3.0.68 cpe:/o:linux:linux_kernel:3.0.69 cpe:/o:linux:linux_kernel:3.0.70 cpe:/o:linux:linux_kernel:3.0.71 cpe:/o:linux:linux_kernel:3.0.72 cpe:/o:linux:linux_kernel:3.0.73 cpe:/o:linux:linux_kernel:3.0.74 cpe:/o:linux:linux_kernel:3.0.75 cpe:/o:linux:linux_kernel:3.0.76 cpe:/o:linux:linux_kernel:3.0.77 cpe:/o:linux:linux_kernel:3.0.78 cpe:/o:linux:linux_kernel:3.0.79 cpe:/o:linux:linux_kernel:3.0.80 cpe:/o:linux:linux_kernel:3.0.81 cpe:/o:linux:linux_kernel:3.0.82 cpe:/o:linux:linux_kernel:3.0.83 cpe:/o:linux:linux_kernel:3.0.84 cpe:/o:linux:linux_kernel:3.0.85 cpe:/o:linux:linux_kernel:3.0.86 cpe:/o:linux:linux_kernel:3.0.87 cpe:/o:linux:linux_kernel:3.0.88 cpe:/o:linux:linux_kernel:3.0.89 cpe:/o:linux:linux_kernel:3.0.90 cpe:/o:linux:linux_kernel:3.0.91 cpe:/o:linux:linux_kernel:3.0.92 cpe:/o:linux:linux_kernel:3.0.93 cpe:/o:linux:linux_kernel:3.0.94 cpe:/o:linux:linux_kernel:3.0.95 cpe:/o:linux:linux_kernel:3.0.96 cpe:/o:linux:linux_kernel:3.0.97 cpe:/o:linux:linux_kernel:3.0.98 cpe:/o:linux:linux_kernel:3.0.99 cpe:/o:linux:linux_kernel:3.0.100 cpe:/o:linux:linux_kernel:3.0.101 cpe:/o:linux:linux_kernel:3.1 cpe:/o:linux:linux_kernel:3.1:rc1 cpe:/o:linux:linux_kernel:3.1:rc2 cpe:/o:linux:linux_kernel:3.1:rc3 cpe:/o:linux:linux_kernel:3.1:rc4 cpe:/o:linux:linux_kernel:3.1.1 cpe:/o:linux:linux_kernel:3.1.2 cpe:/o:linux:linux_kernel:3.1.3 cpe:/o:linux:linux_kernel:3.1.4 cpe:/o:linux:linux_kernel:3.1.5 cpe:/o:linux:linux_kernel:3.1.6 cpe:/o:linux:linux_kernel:3.1.7 cpe:/o:linux:linux_kernel:3.1.8 cpe:/o:linux:linux_kernel:3.1.9 cpe:/o:linux:linux_kernel:3.1.10 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:3.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.2:rc2 cpe:/o:linux:linux_kernel:3.2:rc3 cpe:/o:linux:linux_kernel:3.2:rc4 cpe:/o:linux:linux_kernel:3.2:rc5 cpe:/o:linux:linux_kernel:3.2:rc6 cpe:/o:linux:linux_kernel:3.2:rc7 cpe:/o:linux:linux_kernel:3.2.1 cpe:/o:linux:linux_kernel:3.2.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.2.2 cpe:/o:linux:linux_kernel:3.2.3 cpe:/o:linux:linux_kernel:3.2.4 cpe:/o:linux:linux_kernel:3.2.5 cpe:/o:linux:linux_kernel:3.2.6 cpe:/o:linux:linux_kernel:3.2.7 cpe:/o:linux:linux_kernel:3.2.8 cpe:/o:linux:linux_kernel:3.2.9 cpe:/o:linux:linux_kernel:3.2.10 cpe:/o:linux:linux_kernel:3.2.11 cpe:/o:linux:linux_kernel:3.2.12 cpe:/o:linux:linux_kernel:3.2.13 cpe:/o:linux:linux_kernel:3.2.14 cpe:/o:linux:linux_kernel:3.2.15 cpe:/o:linux:linux_kernel:3.2.16 cpe:/o:linux:linux_kernel:3.2.17 cpe:/o:linux:linux_kernel:3.2.18 cpe:/o:linux:linux_kernel:3.2.19 cpe:/o:linux:linux_kernel:3.2.20 cpe:/o:linux:linux_kernel:3.2.21 cpe:/o:linux:linux_kernel:3.2.22 cpe:/o:linux:linux_kernel:3.2.23 cpe:/o:linux:linux_kernel:3.2.24 cpe:/o:linux:linux_kernel:3.2.25 cpe:/o:linux:linux_kernel:3.2.26 cpe:/o:linux:linux_kernel:3.2.27 cpe:/o:linux:linux_kernel:3.2.28 cpe:/o:linux:linux_kernel:3.2.29 cpe:/o:linux:linux_kernel:3.2.30 cpe:/o:linux:linux_kernel:3.2.31 cpe:/o:linux:linux_kernel:3.2.32 cpe:/o:linux:linux_kernel:3.2.33 cpe:/o:linux:linux_kernel:3.2.34 cpe:/o:linux:linux_kernel:3.2.35 cpe:/o:linux:linux_kernel:3.2.36 cpe:/o:linux:linux_kernel:3.2.37 cpe:/o:linux:linux_kernel:3.2.38 cpe:/o:linux:linux_kernel:3.2.39 cpe:/o:linux:linux_kernel:3.2.40 cpe:/o:linux:linux_kernel:3.2.41 cpe:/o:linux:linux_kernel:3.2.42 cpe:/o:linux:linux_kernel:3.2.43 cpe:/o:linux:linux_kernel:3.2.44 cpe:/o:linux:linux_kernel:3.2.45 cpe:/o:linux:linux_kernel:3.2.46 cpe:/o:linux:linux_kernel:3.2.47 cpe:/o:linux:linux_kernel:3.2.48 cpe:/o:linux:linux_kernel:3.2.49 cpe:/o:linux:linux_kernel:3.2.50 cpe:/o:linux:linux_kernel:3.2.51 cpe:/o:linux:linux_kernel:3.2.52 cpe:/o:linux:linux_kernel:3.2.53 cpe:/o:linux:linux_kernel:3.2.54 cpe:/o:linux:linux_kernel:3.2.55 cpe:/o:linux:linux_kernel:3.2.56 cpe:/o:linux:linux_kernel:3.2.57 cpe:/o:linux:linux_kernel:3.2.58 cpe:/o:linux:linux_kernel:3.2.59 cpe:/o:linux:linux_kernel:3.2.60 cpe:/o:linux:linux_kernel:3.2.61 cpe:/o:linux:linux_kernel:3.2.62 cpe:/o:linux:linux_kernel:3.2.63 cpe:/o:linux:linux_kernel:3.2.64 cpe:/o:linux:linux_kernel:3.2.65 cpe:/o:linux:linux_kernel:3.2.66 cpe:/o:linux:linux_kernel:3.2.67 cpe:/o:linux:linux_kernel:3.2.68 cpe:/o:linux:linux_kernel:3.2.69 cpe:/o:linux:linux_kernel:3.2.70 cpe:/o:linux:linux_kernel:3.2.71 cpe:/o:linux:linux_kernel:3.2.72 cpe:/o:linux:linux_kernel:3.2.73 cpe:/o:linux:linux_kernel:3.2.74 cpe:/o:linux:linux_kernel:3.2.75 cpe:/o:linux:linux_kernel:3.2.76 cpe:/o:linux:linux_kernel:3.2.77 cpe:/o:linux:linux_kernel:3.2.78 cpe:/o:linux:linux_kernel:3.2.79 cpe:/o:linux:linux_kernel:3.2.80 cpe:/o:linux:linux_kernel:3.3 cpe:/o:linux:linux_kernel:3.3:rc1 cpe:/o:linux:linux_kernel:3.3:rc2 cpe:/o:linux:linux_kernel:3.3:rc3 cpe:/o:linux:linux_kernel:3.3:rc4 cpe:/o:linux:linux_kernel:3.3:rc5 cpe:/o:linux:linux_kernel:3.3:rc6 cpe:/o:linux:linux_kernel:3.3:rc7 cpe:/o:linux:linux_kernel:3.3.1 cpe:/o:linux:linux_kernel:3.3.2 cpe:/o:linux:linux_kernel:3.3.3 cpe:/o:linux:linux_kernel:3.3.4 cpe:/o:linux:linux_kernel:3.3.5 cpe:/o:linux:linux_kernel:3.3.6 cpe:/o:linux:linux_kernel:3.3.7 cpe:/o:linux:linux_kernel:3.3.8 cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc1 cpe:/o:linux:linux_kernel:3.4:rc1:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc2 cpe:/o:linux:linux_kernel:3.4:rc2:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc3 cpe:/o:linux:linux_kernel:3.4:rc3:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc4 cpe:/o:linux:linux_kernel:3.4:rc4:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc5 cpe:/o:linux:linux_kernel:3.4:rc5:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc6 cpe:/o:linux:linux_kernel:3.4:rc6:~~~~x86~ cpe:/o:linux:linux_kernel:3.4:rc7 cpe:/o:linux:linux_kernel:3.4:rc7:~~~~x86~ cpe:/o:linux:linux_kernel:3.4.1 cpe:/o:linux:linux_kernel:3.4.1::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.2 cpe:/o:linux:linux_kernel:3.4.2::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.3 cpe:/o:linux:linux_kernel:3.4.3::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.4 cpe:/o:linux:linux_kernel:3.4.4::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.5 cpe:/o:linux:linux_kernel:3.4.5::~~~~x86~ cpe:/o:linux:linux_kernel:3.4.6 cpe:/o:linux:linux_kernel:3.4.7 cpe:/o:linux:linux_kernel:3.4.8 cpe:/o:linux:linux_kernel:3.4.9 cpe:/o:linux:linux_kernel:3.4.10 cpe:/o:linux:linux_kernel:3.4.11 cpe:/o:linux:linux_kernel:3.4.12 cpe:/o:linux:linux_kernel:3.4.13 cpe:/o:linux:linux_kernel:3.4.14 cpe:/o:linux:linux_kernel:3.4.15 cpe:/o:linux:linux_kernel:3.4.16 cpe:/o:linux:linux_kernel:3.4.17 cpe:/o:linux:linux_kernel:3.4.18 cpe:/o:linux:linux_kernel:3.4.19 cpe:/o:linux:linux_kernel:3.4.20 cpe:/o:linux:linux_kernel:3.4.21 cpe:/o:linux:linux_kernel:3.4.22 cpe:/o:linux:linux_kernel:3.4.23 cpe:/o:linux:linux_kernel:3.4.24 cpe:/o:linux:linux_kernel:3.4.25 cpe:/o:linux:linux_kernel:3.4.26 cpe:/o:linux:linux_kernel:3.4.27 cpe:/o:linux:linux_kernel:3.4.28 cpe:/o:linux:linux_kernel:3.4.29 cpe:/o:linux:linux_kernel:3.4.30 cpe:/o:linux:linux_kernel:3.4.31 cpe:/o:linux:linux_kernel:3.4.32 cpe:/o:linux:linux_kernel:3.4.33 cpe:/o:linux:linux_kernel:3.4.34 cpe:/o:linux:linux_kernel:3.4.35 cpe:/o:linux:linux_kernel:3.4.36 cpe:/o:linux:linux_kernel:3.4.37 cpe:/o:linux:linux_kernel:3.4.38 cpe:/o:linux:linux_kernel:3.4.39 cpe:/o:linux:linux_kernel:3.4.40 cpe:/o:linux:linux_kernel:3.4.41 cpe:/o:linux:linux_kernel:3.4.42 cpe:/o:linux:linux_kernel:3.4.43 cpe:/o:linux:linux_kernel:3.4.44 cpe:/o:linux:linux_kernel:3.4.45 cpe:/o:linux:linux_kernel:3.4.46 cpe:/o:linux:linux_kernel:3.4.47 cpe:/o:linux:linux_kernel:3.4.48 cpe:/o:linux:linux_kernel:3.4.49 cpe:/o:linux:linux_kernel:3.4.50 cpe:/o:linux:linux_kernel:3.4.51 cpe:/o:linux:linux_kernel:3.4.52 cpe:/o:linux:linux_kernel:3.4.53 cpe:/o:linux:linux_kernel:3.4.54 cpe:/o:linux:linux_kernel:3.4.55 cpe:/o:linux:linux_kernel:3.4.56 cpe:/o:linux:linux_kernel:3.4.57 cpe:/o:linux:linux_kernel:3.4.58 cpe:/o:linux:linux_kernel:3.4.59 cpe:/o:linux:linux_kernel:3.4.60 cpe:/o:linux:linux_kernel:3.4.61 cpe:/o:linux:linux_kernel:3.4.62 cpe:/o:linux:linux_kernel:3.4.63 cpe:/o:linux:linux_kernel:3.4.64 cpe:/o:linux:linux_kernel:3.4.65 cpe:/o:linux:linux_kernel:3.4.66 cpe:/o:linux:linux_kernel:3.4.67 cpe:/o:linux:linux_kernel:3.4.68 cpe:/o:linux:linux_kernel:3.4.69 cpe:/o:linux:linux_kernel:3.4.70 cpe:/o:linux:linux_kernel:3.4.71 cpe:/o:linux:linux_kernel:3.4.72 cpe:/o:linux:linux_kernel:3.4.73 cpe:/o:linux:linux_kernel:3.4.74 cpe:/o:linux:linux_kernel:3.4.75 cpe:/o:linux:linux_kernel:3.4.76 cpe:/o:linux:linux_kernel:3.4.77 cpe:/o:linux:linux_kernel:3.4.78 cpe:/o:linux:linux_kernel:3.4.79 cpe:/o:linux:linux_kernel:3.4.80 cpe:/o:linux:linux_kernel:3.4.81 cpe:/o:linux:linux_kernel:3.4.82 cpe:/o:linux:linux_kernel:3.4.83 cpe:/o:linux:linux_kernel:3.4.84 cpe:/o:linux:linux_kernel:3.4.85 cpe:/o:linux:linux_kernel:3.4.86 cpe:/o:linux:linux_kernel:3.4.87 cpe:/o:linux:linux_kernel:3.4.88 cpe:/o:linux:linux_kernel:3.4.89 cpe:/o:linux:linux_kernel:3.4.90 cpe:/o:linux:linux_kernel:3.4.91 cpe:/o:linux:linux_kernel:3.4.92 cpe:/o:linux:linux_kernel:3.4.93 cpe:/o:linux:linux_kernel:3.4.94 cpe:/o:linux:linux_kernel:3.4.95 cpe:/o:linux:linux_kernel:3.4.96 cpe:/o:linux:linux_kernel:3.4.97 cpe:/o:linux:linux_kernel:3.4.98 cpe:/o:linux:linux_kernel:3.4.99 cpe:/o:linux:linux_kernel:3.4.100 cpe:/o:linux:linux_kernel:3.4.101 cpe:/o:linux:linux_kernel:3.4.102 cpe:/o:linux:linux_kernel:3.4.103 cpe:/o:linux:linux_kernel:3.4.104 cpe:/o:linux:linux_kernel:3.4.105 cpe:/o:linux:linux_kernel:3.4.106 cpe:/o:linux:linux_kernel:3.4.107 cpe:/o:linux:linux_kernel:3.4.108 cpe:/o:linux:linux_kernel:3.4.109 cpe:/o:linux:linux_kernel:3.4.110 cpe:/o:linux:linux_kernel:3.4.111 cpe:/o:linux:linux_kernel:3.4.112 cpe:/o:linux:linux_kernel:3.5.1 cpe:/o:linux:linux_kernel:3.5.2 cpe:/o:linux:linux_kernel:3.5.3 cpe:/o:linux:linux_kernel:3.5.4 cpe:/o:linux:linux_kernel:3.5.5 cpe:/o:linux:linux_kernel:3.5.6 cpe:/o:linux:linux_kernel:3.5.7 cpe:/o:linux:linux_kernel:3.6 cpe:/o:linux:linux_kernel:3.6.1 cpe:/o:linux:linux_kernel:3.6.2 cpe:/o:linux:linux_kernel:3.6.3 cpe:/o:linux:linux_kernel:3.6.4 cpe:/o:linux:linux_kernel:3.6.5 cpe:/o:linux:linux_kernel:3.6.6 cpe:/o:linux:linux_kernel:3.6.7 cpe:/o:linux:linux_kernel:3.6.8 cpe:/o:linux:linux_kernel:3.6.9 cpe:/o:linux:linux_kernel:3.6.10 cpe:/o:linux:linux_kernel:3.6.11 cpe:/o:linux:linux_kernel:3.7 cpe:/o:linux:linux_kernel:3.7.1 cpe:/o:linux:linux_kernel:3.7.2 cpe:/o:linux:linux_kernel:3.7.3 cpe:/o:linux:linux_kernel:3.7.4 cpe:/o:linux:linux_kernel:3.7.5 cpe:/o:linux:linux_kernel:3.7.6 cpe:/o:linux:linux_kernel:3.7.7 cpe:/o:linux:linux_kernel:3.7.8 cpe:/o:linux:linux_kernel:3.7.9 cpe:/o:linux:linux_kernel:3.7.10 cpe:/o:linux:linux_kernel:3.8.0 cpe:/o:linux:linux_kernel:3.8.1 cpe:/o:linux:linux_kernel:3.8.2 cpe:/o:linux:linux_kernel:3.8.3 cpe:/o:linux:linux_kernel:3.8.4 cpe:/o:linux:linux_kernel:3.8.5 cpe:/o:linux:linux_kernel:3.8.6 cpe:/o:linux:linux_kernel:3.8.7 cpe:/o:linux:linux_kernel:3.8.8 cpe:/o:linux:linux_kernel:3.8.9 cpe:/o:linux:linux_kernel:3.8.10 cpe:/o:linux:linux_kernel:3.8.11 cpe:/o:linux:linux_kernel:3.8.12 cpe:/o:linux:linux_kernel:3.8.13 cpe:/o:linux:linux_kernel:3.9:rc1 cpe:/o:linux:linux_kernel:3.9:rc2 cpe:/o:linux:linux_kernel:3.9:rc3 cpe:/o:linux:linux_kernel:3.9:rc4 cpe:/o:linux:linux_kernel:3.9:rc5 cpe:/o:linux:linux_kernel:3.9:rc6 cpe:/o:linux:linux_kernel:3.9:rc7 cpe:/o:linux:linux_kernel:3.9.0 cpe:/o:linux:linux_kernel:3.9.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.1 cpe:/o:linux:linux_kernel:3.9.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.2 cpe:/o:linux:linux_kernel:3.9.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.3 cpe:/o:linux:linux_kernel:3.9.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.4 cpe:/o:linux:linux_kernel:3.9.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.5 cpe:/o:linux:linux_kernel:3.9.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.6 cpe:/o:linux:linux_kernel:3.9.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.7 cpe:/o:linux:linux_kernel:3.9.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.8 cpe:/o:linux:linux_kernel:3.9.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.9 cpe:/o:linux:linux_kernel:3.9.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.10 cpe:/o:linux:linux_kernel:3.9.10::~~~~arm64~ cpe:/o:linux:linux_kernel:3.9.11 cpe:/o:linux:linux_kernel:3.9.11::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:3.10.0::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.1 cpe:/o:linux:linux_kernel:3.10.1::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.2 cpe:/o:linux:linux_kernel:3.10.2::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.3 cpe:/o:linux:linux_kernel:3.10.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.4 cpe:/o:linux:linux_kernel:3.10.4::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.5 cpe:/o:linux:linux_kernel:3.10.5::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.6 cpe:/o:linux:linux_kernel:3.10.6::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.7 cpe:/o:linux:linux_kernel:3.10.7::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.8 cpe:/o:linux:linux_kernel:3.10.8::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.9 cpe:/o:linux:linux_kernel:3.10.9::~~~~arm64~ cpe:/o:linux:linux_kernel:3.10.10 cpe:/o:linux:linux_kernel:3.10.11 cpe:/o:linux:linux_kernel:3.10.12 cpe:/o:linux:linux_kernel:3.10.13 cpe:/o:linux:linux_kernel:3.10.14 cpe:/o:linux:linux_kernel:3.10.15 cpe:/o:linux:linux_kernel:3.10.16 cpe:/o:linux:linux_kernel:3.10.17 cpe:/o:linux:linux_kernel:3.10.18 cpe:/o:linux:linux_kernel:3.10.19 cpe:/o:linux:linux_kernel:3.10.20 cpe:/o:linux:linux_kernel:3.10.21 cpe:/o:linux:linux_kernel:3.10.22 cpe:/o:linux:linux_kernel:3.10.23 cpe:/o:linux:linux_kernel:3.10.24 cpe:/o:linux:linux_kernel:3.10.25 cpe:/o:linux:linux_kernel:3.10.26 cpe:/o:linux:linux_kernel:3.10.27 cpe:/o:linux:linux_kernel:3.10.28 cpe:/o:linux:linux_kernel:3.10.29 cpe:/o:linux:linux_kernel:3.10.30 cpe:/o:linux:linux_kernel:3.10.31 cpe:/o:linux:linux_kernel:3.10.32 cpe:/o:linux:linux_kernel:3.10.33 cpe:/o:linux:linux_kernel:3.10.34 cpe:/o:linux:linux_kernel:3.10.35 cpe:/o:linux:linux_kernel:3.10.36 cpe:/o:linux:linux_kernel:3.10.37 cpe:/o:linux:linux_kernel:3.10.38 cpe:/o:linux:linux_kernel:3.10.39 cpe:/o:linux:linux_kernel:3.10.40 cpe:/o:linux:linux_kernel:3.10.41 cpe:/o:linux:linux_kernel:3.10.42 cpe:/o:linux:linux_kernel:3.10.43 cpe:/o:linux:linux_kernel:3.10.44 cpe:/o:linux:linux_kernel:3.10.45 cpe:/o:linux:linux_kernel:3.10.46 cpe:/o:linux:linux_kernel:3.10.47 cpe:/o:linux:linux_kernel:3.10.48 cpe:/o:linux:linux_kernel:3.10.49 cpe:/o:linux:linux_kernel:3.10.50 cpe:/o:linux:linux_kernel:3.10.51 cpe:/o:linux:linux_kernel:3.10.52 cpe:/o:linux:linux_kernel:3.10.53 cpe:/o:linux:linux_kernel:3.10.54 cpe:/o:linux:linux_kernel:3.10.55 cpe:/o:linux:linux_kernel:3.10.56 cpe:/o:linux:linux_kernel:3.10.57 cpe:/o:linux:linux_kernel:3.10.58 cpe:/o:linux:linux_kernel:3.10.59 cpe:/o:linux:linux_kernel:3.10.60 cpe:/o:linux:linux_kernel:3.10.61 cpe:/o:linux:linux_kernel:3.10.62 cpe:/o:linux:linux_kernel:3.10.63 cpe:/o:linux:linux_kernel:3.10.64 cpe:/o:linux:linux_kernel:3.10.65 cpe:/o:linux:linux_kernel:3.10.66 cpe:/o:linux:linux_kernel:3.10.67 cpe:/o:linux:linux_kernel:3.10.68 cpe:/o:linux:linux_kernel:3.10.69 cpe:/o:linux:linux_kernel:3.10.70 cpe:/o:linux:linux_kernel:3.10.71 cpe:/o:linux:linux_kernel:3.10.72 cpe:/o:linux:linux_kernel:3.10.73 cpe:/o:linux:linux_kernel:3.10.74 cpe:/o:linux:linux_kernel:3.10.75 cpe:/o:linux:linux_kernel:3.10.76 cpe:/o:linux:linux_kernel:3.10.77 cpe:/o:linux:linux_kernel:3.10.78 cpe:/o:linux:linux_kernel:3.10.79 cpe:/o:linux:linux_kernel:3.10.80 cpe:/o:linux:linux_kernel:3.10.81 cpe:/o:linux:linux_kernel:3.10.82 cpe:/o:linux:linux_kernel:3.10.83 cpe:/o:linux:linux_kernel:3.10.84 cpe:/o:linux:linux_kernel:3.10.85 cpe:/o:linux:linux_kernel:3.10.86 cpe:/o:linux:linux_kernel:3.10.87 cpe:/o:linux:linux_kernel:3.10.88 cpe:/o:linux:linux_kernel:3.10.89 cpe:/o:linux:linux_kernel:3.10.90 cpe:/o:linux:linux_kernel:3.10.91 cpe:/o:linux:linux_kernel:3.10.92 cpe:/o:linux:linux_kernel:3.10.93 cpe:/o:linux:linux_kernel:3.10.94 cpe:/o:linux:linux_kernel:3.10.95 cpe:/o:linux:linux_kernel:3.10.96 cpe:/o:linux:linux_kernel:3.10.97 cpe:/o:linux:linux_kernel:3.10.98 cpe:/o:linux:linux_kernel:3.10.99 cpe:/o:linux:linux_kernel:3.10.100 cpe:/o:linux:linux_kernel:3.10.101 cpe:/o:linux:linux_kernel:3.11 cpe:/o:linux:linux_kernel:3.11.1 cpe:/o:linux:linux_kernel:3.11.2 cpe:/o:linux:linux_kernel:3.11.3 cpe:/o:linux:linux_kernel:3.11.4 cpe:/o:linux:linux_kernel:3.11.5 cpe:/o:linux:linux_kernel:3.11.6 cpe:/o:linux:linux_kernel:3.11.7 cpe:/o:linux:linux_kernel:3.11.8 cpe:/o:linux:linux_kernel:3.11.9 cpe:/o:linux:linux_kernel:3.11.10 cpe:/o:linux:linux_kernel:3.12 cpe:/o:linux:linux_kernel:3.12.1 cpe:/o:linux:linux_kernel:3.12.2 cpe:/o:linux:linux_kernel:3.12.3 cpe:/o:linux:linux_kernel:3.12.4 cpe:/o:linux:linux_kernel:3.12.5 cpe:/o:linux:linux_kernel:3.12.6 cpe:/o:linux:linux_kernel:3.12.7 cpe:/o:linux:linux_kernel:3.12.8 cpe:/o:linux:linux_kernel:3.12.9 cpe:/o:linux:linux_kernel:3.12.10 cpe:/o:linux:linux_kernel:3.12.11 cpe:/o:linux:linux_kernel:3.12.12 cpe:/o:linux:linux_kernel:3.12.13 cpe:/o:linux:linux_kernel:3.12.14 cpe:/o:linux:linux_kernel:3.12.15 cpe:/o:linux:linux_kernel:3.12.16 cpe:/o:linux:linux_kernel:3.12.17 cpe:/o:linux:linux_kernel:3.12.18 cpe:/o:linux:linux_kernel:3.12.19 cpe:/o:linux:linux_kernel:3.12.20 cpe:/o:linux:linux_kernel:3.12.21 cpe:/o:linux:linux_kernel:3.12.22 cpe:/o:linux:linux_kernel:3.12.23 cpe:/o:linux:linux_kernel:3.12.24 cpe:/o:linux:linux_kernel:3.12.25 cpe:/o:linux:linux_kernel:3.12.26 cpe:/o:linux:linux_kernel:3.12.27 cpe:/o:linux:linux_kernel:3.12.28 cpe:/o:linux:linux_kernel:3.12.29 cpe:/o:linux:linux_kernel:3.12.30 cpe:/o:linux:linux_kernel:3.12.31 cpe:/o:linux:linux_kernel:3.12.32 cpe:/o:linux:linux_kernel:3.12.33 cpe:/o:linux:linux_kernel:3.12.34 cpe:/o:linux:linux_kernel:3.12.35 cpe:/o:linux:linux_kernel:3.12.36 cpe:/o:linux:linux_kernel:3.12.37 cpe:/o:linux:linux_kernel:3.12.38 cpe:/o:linux:linux_kernel:3.12.39 cpe:/o:linux:linux_kernel:3.12.40 cpe:/o:linux:linux_kernel:3.12.41 cpe:/o:linux:linux_kernel:3.12.42 cpe:/o:linux:linux_kernel:3.12.43 cpe:/o:linux:linux_kernel:3.12.44 cpe:/o:linux:linux_kernel:3.12.45 cpe:/o:linux:linux_kernel:3.12.46 cpe:/o:linux:linux_kernel:3.12.47 cpe:/o:linux:linux_kernel:3.12.48 cpe:/o:linux:linux_kernel:3.12.49 cpe:/o:linux:linux_kernel:3.12.50 cpe:/o:linux:linux_kernel:3.12.51 cpe:/o:linux:linux_kernel:3.12.52 cpe:/o:linux:linux_kernel:3.12.53 cpe:/o:linux:linux_kernel:3.12.54 cpe:/o:linux:linux_kernel:3.12.55 cpe:/o:linux:linux_kernel:3.12.56 cpe:/o:linux:linux_kernel:3.12.57 cpe:/o:linux:linux_kernel:3.12.58 cpe:/o:linux:linux_kernel:3.12.59 cpe:/o:linux:linux_kernel:3.13 cpe:/o:linux:linux_kernel:3.13.1 cpe:/o:linux:linux_kernel:3.13.2 cpe:/o:linux:linux_kernel:3.13.3 cpe:/o:linux:linux_kernel:3.13.4 cpe:/o:linux:linux_kernel:3.13.5 cpe:/o:linux:linux_kernel:3.13.6 cpe:/o:linux:linux_kernel:3.13.7 cpe:/o:linux:linux_kernel:3.13.8 cpe:/o:linux:linux_kernel:3.13.9 cpe:/o:linux:linux_kernel:3.13.10 cpe:/o:linux:linux_kernel:3.13.11 cpe:/o:linux:linux_kernel:3.14:- cpe:/o:linux:linux_kernel:3.14:rc1 cpe:/o:linux:linux_kernel:3.14:rc2 cpe:/o:linux:linux_kernel:3.14:rc3 cpe:/o:linux:linux_kernel:3.14:rc4 cpe:/o:linux:linux_kernel:3.14:rc5 cpe:/o:linux:linux_kernel:3.14:rc6 cpe:/o:linux:linux_kernel:3.14:rc7 cpe:/o:linux:linux_kernel:3.14:rc8 cpe:/o:linux:linux_kernel:3.14.1 cpe:/o:linux:linux_kernel:3.14.2 cpe:/o:linux:linux_kernel:3.14.3 cpe:/o:linux:linux_kernel:3.14.4 cpe:/o:linux:linux_kernel:3.14.5 cpe:/o:linux:linux_kernel:3.14.6 cpe:/o:linux:linux_kernel:3.14.7 cpe:/o:linux:linux_kernel:3.14.8 cpe:/o:linux:linux_kernel:3.14.10 cpe:/o:linux:linux_kernel:3.14.11 cpe:/o:linux:linux_kernel:3.14.12 cpe:/o:linux:linux_kernel:3.14.13 cpe:/o:linux:linux_kernel:3.14.14 cpe:/o:linux:linux_kernel:3.14.15 cpe:/o:linux:linux_kernel:3.14.16 cpe:/o:linux:linux_kernel:3.14.17 cpe:/o:linux:linux_kernel:3.14.18 cpe:/o:linux:linux_kernel:3.14.19 cpe:/o:linux:linux_kernel:3.14.20 cpe:/o:linux:linux_kernel:3.14.21 cpe:/o:linux:linux_kernel:3.14.22 cpe:/o:linux:linux_kernel:3.14.23 cpe:/o:linux:linux_kernel:3.14.24 cpe:/o:linux:linux_kernel:3.14.25 cpe:/o:linux:linux_kernel:3.14.26 cpe:/o:linux:linux_kernel:3.14.27 cpe:/o:linux:linux_kernel:3.14.28 cpe:/o:linux:linux_kernel:3.14.29 cpe:/o:linux:linux_kernel:3.14.30 cpe:/o:linux:linux_kernel:3.14.31 cpe:/o:linux:linux_kernel:3.14.32 cpe:/o:linux:linux_kernel:3.14.33 cpe:/o:linux:linux_kernel:3.14.34 cpe:/o:linux:linux_kernel:3.14.35 cpe:/o:linux:linux_kernel:3.14.36 cpe:/o:linux:linux_kernel:3.14.37 cpe:/o:linux:linux_kernel:3.14.38 cpe:/o:linux:linux_kernel:3.14.39 cpe:/o:linux:linux_kernel:3.14.40 cpe:/o:linux:linux_kernel:3.14.41 cpe:/o:linux:linux_kernel:3.14.42 cpe:/o:linux:linux_kernel:3.14.43 cpe:/o:linux:linux_kernel:3.14.44 cpe:/o:linux:linux_kernel:3.14.45 cpe:/o:linux:linux_kernel:3.14.46 cpe:/o:linux:linux_kernel:3.14.47 cpe:/o:linux:linux_kernel:3.14.48 cpe:/o:linux:linux_kernel:3.14.49 cpe:/o:linux:linux_kernel:3.14.50 cpe:/o:linux:linux_kernel:3.14.51 cpe:/o:linux:linux_kernel:3.14.52 cpe:/o:linux:linux_kernel:3.14.53 cpe:/o:linux:linux_kernel:3.14.54 cpe:/o:linux:linux_kernel:3.14.55 cpe:/o:linux:linux_kernel:3.14.56 cpe:/o:linux:linux_kernel:3.14.57 cpe:/o:linux:linux_kernel:3.14.58 cpe:/o:linux:linux_kernel:3.14.59 cpe:/o:linux:linux_kernel:3.14.60 cpe:/o:linux:linux_kernel:3.14.61 cpe:/o:linux:linux_kernel:3.14.62 cpe:/o:linux:linux_kernel:3.14.63 cpe:/o:linux:linux_kernel:3.14.64 cpe:/o:linux:linux_kernel:3.14.65 cpe:/o:linux:linux_kernel:3.14.66 cpe:/o:linux:linux_kernel:3.14.67 cpe:/o:linux:linux_kernel:3.14.68 cpe:/o:linux:linux_kernel:3.15 cpe:/o:linux:linux_kernel:3.15.1 cpe:/o:linux:linux_kernel:3.15.2 cpe:/o:linux:linux_kernel:3.15.3 cpe:/o:linux:linux_kernel:3.15.4 cpe:/o:linux:linux_kernel:3.15.5 cpe:/o:linux:linux_kernel:3.15.6 cpe:/o:linux:linux_kernel:3.15.7 cpe:/o:linux:linux_kernel:3.15.8 cpe:/o:linux:linux_kernel:3.15.10 cpe:/o:linux:linux_kernel:3.16.0 cpe:/o:linux:linux_kernel:3.16.1 cpe:/o:linux:linux_kernel:3.16.2 cpe:/o:linux:linux_kernel:3.16.3 cpe:/o:linux:linux_kernel:3.16.4 cpe:/o:linux:linux_kernel:3.16.5 cpe:/o:linux:linux_kernel:3.16.6 cpe:/o:linux:linux_kernel:3.16.7 cpe:/o:linux:linux_kernel:3.17.1 cpe:/o:linux:linux_kernel:3.17.2 cpe:/o:linux:linux_kernel:3.17.3 cpe:/o:linux:linux_kernel:3.17.3::~~~~arm64~ cpe:/o:linux:linux_kernel:3.17.4 cpe:/o:linux:linux_kernel:3.17.5 cpe:/o:linux:linux_kernel:3.17.6 cpe:/o:linux:linux_kernel:3.17.7 cpe:/o:linux:linux_kernel:3.17.8 cpe:/o:linux:linux_kernel:3.18.0 cpe:/o:linux:linux_kernel:3.18.1 cpe:/o:linux:linux_kernel:3.18.2 cpe:/o:linux:linux_kernel:3.18.3 cpe:/o:linux:linux_kernel:3.18.4 cpe:/o:linux:linux_kernel:3.18.5 cpe:/o:linux:linux_kernel:3.18.6 cpe:/o:linux:linux_kernel:3.18.7 cpe:/o:linux:linux_kernel:3.18.8 cpe:/o:linux:linux_kernel:3.18.9 cpe:/o:linux:linux_kernel:3.18.10 cpe:/o:linux:linux_kernel:3.18.11 cpe:/o:linux:linux_kernel:3.18.12 cpe:/o:linux:linux_kernel:3.18.13 cpe:/o:linux:linux_kernel:3.18.14 cpe:/o:linux:linux_kernel:3.18.15 cpe:/o:linux:linux_kernel:3.18.16 cpe:/o:linux:linux_kernel:3.18.17 cpe:/o:linux:linux_kernel:3.18.18 cpe:/o:linux:linux_kernel:3.18.19 cpe:/o:linux:linux_kernel:3.18.20 cpe:/o:linux:linux_kernel:3.18.21 cpe:/o:linux:linux_kernel:3.18.22 cpe:/o:linux:linux_kernel:3.18.23 cpe:/o:linux:linux_kernel:3.18.24 cpe:/o:linux:linux_kernel:3.18.25 cpe:/o:linux:linux_kernel:3.18.26 cpe:/o:linux:linux_kernel:3.18.27 cpe:/o:linux:linux_kernel:3.18.28 cpe:/o:linux:linux_kernel:3.18.29 cpe:/o:linux:linux_kernel:3.18.30 cpe:/o:linux:linux_kernel:3.18.31 cpe:/o:linux:linux_kernel:3.18.32 cpe:/o:linux:linux_kernel:3.19 cpe:/o:linux:linux_kernel:3.19.1 cpe:/o:linux:linux_kernel:3.19.2 cpe:/o:linux:linux_kernel:3.19.3 cpe:/o:linux:linux_kernel:3.19.4 cpe:/o:linux:linux_kernel:3.19.5 cpe:/o:linux:linux_kernel:3.19.6 cpe:/o:linux:linux_kernel:3.19.7 cpe:/o:linux:linux_kernel:3.19.8 cpe:/o:linux:linux_kernel:4.0.0 cpe:/o:linux:linux_kernel:4.0.1 cpe:/o:linux:linux_kernel:4.0.2 cpe:/o:linux:linux_kernel:4.0.3 cpe:/o:linux:linux_kernel:4.0.4 cpe:/o:linux:linux_kernel:4.0.5 cpe:/o:linux:linux_kernel:4.0.6 cpe:/o:linux:linux_kernel:4.0.7 cpe:/o:linux:linux_kernel:4.0.8 cpe:/o:linux:linux_kernel:4.0.9 cpe:/o:linux:linux_kernel:4.1.0 cpe:/o:linux:linux_kernel:4.1.1 cpe:/o:linux:linux_kernel:4.1.2 cpe:/o:linux:linux_kernel:4.1.3 cpe:/o:linux:linux_kernel:4.1.4 cpe:/o:linux:linux_kernel:4.1.5 cpe:/o:linux:linux_kernel:4.1.6 cpe:/o:linux:linux_kernel:4.1.7 cpe:/o:linux:linux_kernel:4.1.8 cpe:/o:linux:linux_kernel:4.1.9 cpe:/o:linux:linux_kernel:4.1.10 cpe:/o:linux:linux_kernel:4.1.11 cpe:/o:linux:linux_kernel:4.1.12 cpe:/o:linux:linux_kernel:4.1.13 cpe:/o:linux:linux_kernel:4.1.14 cpe:/o:linux:linux_kernel:4.1.15 cpe:/o:linux:linux_kernel:4.1.16 cpe:/o:linux:linux_kernel:4.1.17 cpe:/o:linux:linux_kernel:4.1.18 cpe:/o:linux:linux_kernel:4.1.19 cpe:/o:linux:linux_kernel:4.1.20 cpe:/o:linux:linux_kernel:4.1.21 cpe:/o:linux:linux_kernel:4.1.22 cpe:/o:linux:linux_kernel:4.1.23 cpe:/o:linux:linux_kernel:4.2.0 cpe:/o:linux:linux_kernel:4.2.1 cpe:/o:linux:linux_kernel:4.2.2 cpe:/o:linux:linux_kernel:4.2.3 cpe:/o:linux:linux_kernel:4.2.4 cpe:/o:linux:linux_kernel:4.2.5 cpe:/o:linux:linux_kernel:4.2.6 cpe:/o:linux:linux_kernel:4.2.7 cpe:/o:linux:linux_kernel:4.2.8 cpe:/o:linux:linux_kernel:4.3.0 cpe:/o:linux:linux_kernel:4.3.1 cpe:/o:linux:linux_kernel:4.3.2 cpe:/o:linux:linux_kernel:4.3.3 cpe:/o:linux:linux_kernel:4.3.4 cpe:/o:linux:linux_kernel:4.3.5 cpe:/o:linux:linux_kernel:4.3.6 cpe:/o:linux:linux_kernel:4.4.0 cpe:/o:linux:linux_kernel:4.4.1 cpe:/o:linux:linux_kernel:4.4.2 cpe:/o:linux:linux_kernel:4.4.3 cpe:/o:linux:linux_kernel:4.4.4 cpe:/o:linux:linux_kernel:4.4.5 cpe:/o:linux:linux_kernel:4.4.6 cpe:/o:linux:linux_kernel:4.4.7 cpe:/o:linux:linux_kernel:4.4.8 cpe:/o:linux:linux_kernel:4.4.9 cpe:/o:linux:linux_kernel:4.5.0 cpe:/o:linux:linux_kernel:4.5.1 cpe:/o:linux:linux_kernel:4.5.2 cpe:/o:linux:linux_kernel:4.5.3

CVE-2015-0571

2016-05-09T06:59:02.237-04:00

2016-11-28T14:16:58.313-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://source.android.com/security/bulletin/2016-05-01.html BID 77691 CONFIRM https://www.codeaurora.org/projects/security-advisories/multiple-issues-wlan-driver-allow-local-privilege-escalation-cve-2015 The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.

CVE-2015-0572

2016-10-10T06:59:00.167-04:00

2016-11-28T14:16:59.347-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://source.android.com/security/bulletin/2016-10-01.html BID 93312 CONFIRM https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=8fb32c3a8147b82e2bb159b3f70d803c9e68899b CONFIRM https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=34ad3d34fbff11b8e1210b9da0dac937fb956b61 CONFIRM https://www.codeaurora.org/race-condition-leading-arbitrary-null-write-adsp-using-ioctl-compatfastrpcioctlinvokefd-cve-2015 Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the ADSPRPC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (zero-value write) or possibly have unspecified other impact via a COMPAT_FASTRPC_IOCTL_INVOKE_FD ioctl call.

CVE-2015-0573

2016-08-07T17:59:02.190-04:00

2016-08-11T11:05:34.540-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2016-08-10T15:11:15.703-04:00

CONFIRM https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.10/commit/?id=e20f20aaed6b6d2fd1667bad9be9ef35103a51df CONFIRM https://www.codeaurora.org/issues-tsc-tspp2-and-buspm-drivers-cve-2015-0573-cve-2016-2441-cve-2016-2442 drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via a crafted application that makes a TSC_GET_CARD_STATUS ioctl call.

cpe:/o:google:android

CVE-2015-0574

2017-08-18T14:29:00.780-04:00

2018-04-18T21:29:00.957-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BID 103671 CONFIRM https://source.android.com/security/bulletin/2017-07-01 CONFIRM https://source.android.com/security/bulletin/2018-04-01 In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient.

cpe:/o:google:android

CVE-2015-0575

2017-08-18T14:29:00.813-04:00

2017-08-21T13:18:45.253-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-08-21T13:18:16.533-04:00

BID 99467 CONFIRM https://source.android.com/security/bulletin/2017-07-01 In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration.

cpe:/o:google:android

CVE-2015-0576

2017-08-18T14:29:00.860-04:00

2018-04-18T21:29:01.033-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov BID 103671 MISC. https://source.android.com/security/bulletin/2017-04-01 CONFIRM https://source.android.com/security/bulletin/2017-07-01 CONFIRM https://source.android.com/security/bulletin/2018-04-01 In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA.

cpe:/o:cisco:asyncos:-

CVE-2015-0577

2015-01-14T14:59:01.600-05:00

2017-09-07T21:29:44.873-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150113 Cisco AsyncOS ISQ XSS Vulnerability BID 72056 SECTRACK 1031544 XF cisco-asyncos-cve20150577-xss(100556) Multiple cross-site scripting (XSS) vulnerabilities in the IronPort Spam Quarantine (ISQ) page in Cisco AsyncOS, as used on the Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA), allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCus22925 and CSCup08113.

cpe:/a:cisco:adaptive_security_appliance_software:-

CVE-2015-0578

2015-01-14T14:59:02.740-05:00

2017-09-07T21:29:44.933-04:00

5.7

ADJACENT_NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150114 Cisco ASA DHCPv6 Relay DoS Vulnerability BID 72718 SECTRACK 1031542 XF cisco-asa-cve20150578-dos(100549) CISCO 20150115 Cisco Adaptive Security Appliance DHCPv6 Relay Denial of Service Vulnerability Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (device reload) via crafted DHCP packets on the local network, aka Bug ID CSCur45455.

cpe:/a:cisco:telepresence_video_communication_server:::~~control~~~ cpe:/a:cisco:telepresence_video_communication_server:::~~expressway~~~

CVE-2015-0579

2015-01-14T14:59:03.633-05:00

2017-01-06T12:41:19.747-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T11:25:46.230-05:00

CISCO 20150113 Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability BID 72057 SECTRACK 1031541 CISCO 20150115 Cisco TelePresence VCS and Expressway High CPU Utilization Vulnerability Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and partial outage) via crafted SIP packets, aka Bug ID CSCur12473.

cpe:/a:cisco:secure_access_control_system:5.5.0.46

CVE-2015-0580

2015-02-11T20:59:21.593-05:00

2017-09-07T21:29:44.997-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CISCO 20150211 Cisco Secure Access Control System SQL Injection Vulnerability BID 72576 SECTRACK 1031740 XF cisco-acs-cve20150580-sql-injection(100812) Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests, aka Bug ID CSCuq79027.

cpe:/a:cisco:prime_service_catalog:10.0

CVE-2015-0581

2015-01-28T17:59:02.937-05:00

2015-09-17T12:32:49.990-04:00

7.5

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

NONE

PARTIAL

http://nvd.nist.gov

2015-09-17T12:31:12.290-04:00

CISCO 20150128 Cisco Prime Service Catalog XML External Entity Processing Vulnerability BID 72350 SECTRACK 1031658 The XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, as demonstrated by reading private keys, related to an XML External Entity (XXE) issue, aka Bug ID CSCup92880.

cpe:/o:cisco:nx-os:-

CVE-2015-0582

2015-01-09T21:59:43.367-05:00

2017-09-07T21:29:45.060-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150109 Cisco MDS 9000 Series Denial of Service Vulnerability BID 71979 SECTRACK 1031539 XF cisco-nxos-cve20150582-dos(99995) The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka Bug ID CSCuo09129.

cpe:/a:cisco:webex_meeting_center:-

CVE-2015-0583

2015-01-14T14:59:04.867-05:00

2017-09-07T21:29:45.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150112 Cisco WebEx Meetings Server Information Disclosure Vulnerability BID 72012 XF cisco-webex-cve20150583-info-disc(100565) Cisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote attackers to obtain sensitive information via vectors related to file: URIs, aka Bug ID CSCus18281.

cpe:/a:cisco:desktop_collaboration_experience_dx650:-

CVE-2015-0584

2015-02-19T21:59:00.067-05:00

2015-11-27T14:17:57.280-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-11-27T11:27:22.493-05:00

CISCO 20150219 Cisco Collaboration Desk Experience Endpoints Command Injection Vulnerability BID 72696 The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947.

cpe:/o:cisco:ios:15.3%28100%29m

CVE-2015-0586

2015-01-28T17:59:04.153-05:00

2017-09-07T21:29:45.183-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150126 Cisco 2900 Series Integrated Services Router Network-Based Application Recognition Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37171 BID 72309 SECTRACK 1031659 XF cisco-2900series-cve20150586-dos(100660) The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows remote attackers to cause a denial of service (NBAR process hang) via IPv4 packets, aka Bug ID CSCuo73682.

cpe:/a:cisco:unified_communications_domain_manager:10.0

CVE-2015-0588

2015-01-15T17:59:05.460-05:00

2017-09-07T21:29:45.247-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150115 Cisco Unified Communications Domain Manager Cross-Site Request Forgery Vulnerability BID 72082 SECTRACK 1031559 XF cisco-ucdm-cve20150588-csrf(100657) Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo77055.

cpe:/a:cisco:webex_meetings_server:1.0 cpe:/a:cisco:webex_meetings_server:1.1 cpe:/a:cisco:webex_meetings_server:1.5

CVE-2015-0589

2015-02-07T10:59:06.143-05:00

2017-09-07T21:29:45.293-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov CISCO 20150204 Cisco WebEx Meetings Server Command Injection Vulnerability BID 72493 SECTRACK 1031692 XF cisco-webex-cve20150589-command-exec(100719) The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460.

cpe:/a:cisco:webex_meeting_center:-

CVE-2015-0590

2015-01-17T06:59:05.030-05:00

2017-09-07T21:29:45.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150115 Cisco Hosted WebEx Meeting Center Information Disclosure SECTRACK 1031558 XF cisco-webexmc-cve20150590-info-disc(100576) Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action, aka Bug ID CSCuo34165.

cpe:/a:cisco:unified_communications_domain_manager:10.0

CVE-2015-0591

2015-01-15T17:59:06.507-05:00

2017-09-07T21:29:45.403-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150115 Cisco Unified Communications Domain Manager Admin GUI DoS Vulnerability BID 72084 SECTRACK 1031561 XF cisco-ucdm-cve20150591-dos(100661) Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood of malformed TCP packets, aka Bug ID CSCur44177.

cpe:/o:cisco:ios:15.4%281%29t cpe:/o:cisco:ios:15.4%281%29t1 cpe:/o:cisco:ios:15.4%281%29t2 cpe:/o:cisco:ios:15.4%281%29t3 cpe:/o:cisco:ios:15.4%281%29t4 cpe:/o:cisco:ios:15.4%282%29t cpe:/o:cisco:ios:15.4%282%29t1 cpe:/o:cisco:ios:15.4%282%29t2 cpe:/o:cisco:ios:15.4%282%29t3 cpe:/o:cisco:ios:15.4t

CVE-2015-0592

2015-02-11T20:59:22.717-05:00

2017-09-07T21:29:45.450-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150209 Cisco IOS Software Kernel Timer Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37416 SECTRACK 1031713 XF ciscoios-cve20150592-dos(100758) The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672.

cpe:/o:cisco:ios:15.4%281.12%29t cpe:/o:cisco:ios:15.4%281.19%29t

CVE-2015-0593

2015-02-12T21:59:09.063-05:00

2017-09-07T21:29:45.513-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150209 Cisco IOS Software Zone-Based Firewall Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37417 BID 72549 XF ciscoios-cve20150593-dos(100757) The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service (device reload) via crafted network traffic, aka Bug ID CSCul65003.

cpe:/a:cisco:prime_lan_management_solution:- cpe:/a:cisco:security_manager

CVE-2015-0594

2015-02-26T21:59:32.353-05:00

2015-11-02T13:31:56.057-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-02T12:41:31.543-05:00

CISCO 20150226 Cisco Common Services Cross-Site Scripting Vulnerability BID 72793 SECTRACK 1031813 SECTRACK 1031814 Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq54654 and CSCun18263.

cpe:/a:cisco:webex_meetings_server:1.5%28.1.131%29

CVE-2015-0595

2015-02-01T20:59:06.670-05:00

2017-09-07T21:29:45.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150129 Cisco WebEx Meetings Server XMLAPI Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37238 BID 72370 SECTRACK 1031676 XF cisco-webex-cve20150595-info-disc(100667) The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.

cpe:/a:cisco:webex_meetings_server:1.5%28.1.131%29

CVE-2015-0596

2015-02-01T20:59:07.890-05:00

2017-09-07T21:29:45.637-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150129 Cisco WebEx Meetings Server Cross-Site Request Forgery Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37239 BID 72371 SECTRACK 1031677 XF cisco-webex-cve20150596-csrf(100665) Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163.

cpe:/a:cisco:webex_meetings_server:1.5%28.1.131%29

CVE-2015-0597

2015-02-01T20:59:08.950-05:00

2017-09-07T21:29:45.700-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150129 Cisco WebEx Meetings Server User Enumeration Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37240 BID 72373 SECTRACK 1031678 XF cisco-webex-cve20150597-info-disc(100658) The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.

cpe:/o:cisco:ios:- cpe:/o:cisco:ios_xe:-

CVE-2015-0598

2015-03-05T22:00:11.673-05:00

2015-11-02T13:32:13.800-05:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2015-11-02T12:42:36.173-05:00

CISCO 20150305 Cisco IOS Software and Cisco IOS XE Software Crafted RADIUS Packet Denial of Service Vulnerability SECTRACK 1031842 The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693.

cpe:/h:cisco:unified_computing_system:-

CVE-2015-0599

2015-02-03T17:59:02.317-05:00

2017-09-07T21:29:45.747-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150202 Cisco UCS C-Series Rack Servers Integrated Management Controller Cross-Frame Scripting Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37324 BID 72509 XF cisco-ucs-cve20150599-xfs(100614) The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuf50138.

cpe:/o:cisco:unified_ip_phones_9900_series_firmware:9.4%28.1%29

CVE-2015-0600

2015-02-07T10:59:07.237-05:00

2017-09-07T21:29:45.810-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150203 Cisco Unified IP Phone 9900 Series Mobility Extension Availability Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37341 BID 72481 XF cisco-ipphones-cve20150600-dos(100726) The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff) via crafted packets, aka Bug ID CSCuq12139.

cpe:/o:cisco:unified_ip_phones_9951_firmware:9.4%28.1%29 cpe:/o:cisco:unified_ip_phones_9971_firmware:9.4%28.1%29

CVE-2015-0601

2015-02-06T23:59:05.047-05:00

2017-09-07T21:29:45.887-04:00

4.6

LOCAL

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150203 Cisco Unified IP Phone 9900 Series Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37344 BID 72483 XF cisco-unifiedipphone-cve20150601-dos(100617) Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka Bug ID CSCup92790.

cpe:/o:cisco:unified_ip_phones_9900_series_firmware:9.4%28.1%29

CVE-2015-0602

2015-02-07T10:59:08.207-05:00

2017-09-07T21:29:45.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150203 Cisco Unified IP Phone 9900 Series Data Disclosure Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37342 BID 72482 XF cisco-unifiedipphone-cve20150602-info-disc(100615) The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117.

cpe:/o:cisco:unified_ip_phones_9900_series_firmware:9.4%28.1%29

CVE-2015-0603

2015-02-06T23:59:06.467-05:00

2017-09-07T21:29:45.997-04:00

4.6

LOCAL

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150203 Cisco Unified IP Phone 9900 Series Insecure Device Permissions Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37345 BID 72484 XF cisco-unifiedipphone-cve20150603-dos(100619) Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of service (persistent hang or reboot) by writing to a phone's filesystem, aka Bug ID CSCup90474.

cpe:/o:cisco:unified_ip_phones_9951_firmware:9.4%28.1%29 cpe:/o:cisco:unified_ip_phones_9971_firmware:9.4%28.1%29

CVE-2015-0604

2015-02-06T23:59:07.797-05:00

2017-09-07T21:29:46.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150203 Cisco Unified IP Phone 9900 Series Arbitrary File Upload Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37346 BID 72485 XF cisco-unifiedipphone-cve20150604-file-upload(100620) The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a phone's filesystem via crafted HTTP requests, aka Bug ID CSCup90424.

cpe:/o:cisco:asyncos:8.5

CVE-2015-0605

2015-02-06T23:59:09.000-05:00

2018-10-30T12:27:22.513-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150206 Cisco AsyncOS Software Uuencoded Email Filtering Bypass Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37384 BID 72528 XF cisco-asyncos-cve20150605-sec-bypass(100695) The uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8.5 and earlier allows remote attackers to bypass intended content restrictions via a crafted e-mail attachment with uuencode encoding, aka Bug ID CSCzv54343.

cpe:/o:cisco:ios:-

CVE-2015-0606

2015-02-11T20:59:23.703-05:00

2017-09-07T21:29:46.170-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150210 Cisco IOS Shell Denial of Service Vulnerability BID 72550 SECTRACK 1031717 XF ciscoios-cve20150606-dos(100810) The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka Bug ID CSCur59696.

CVE-2015-0607

2015-03-05T22:00:13.470-05:00

2015-03-06T11:17:32.077-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-03-06T09:29:29.880-05:00

CISCO 20150226 Cisco IOS Software Authentication Proxy Bypass Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37711 BID 72794 SECTRACK 1031817 The Authentication Proxy feature in Cisco IOS does not properly handle invalid AAA return codes from RADIUS and TACACS+ servers, which allows remote attackers to bypass authentication in opportunistic circumstances via a connection attempt that triggers an invalid code, as demonstrated by a connection attempt with a blank password, aka Bug IDs CSCuo09400 and CSCun16016.

CVE-2015-0608

2015-02-11T20:59:25.047-05:00

2017-09-07T21:29:46.230-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150210 Cisco IOS Measurement, Aggregation, and Correlation Engine Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37421 BID 72566 SECTRACK 1031731 XF ciscoios-cve20150608-dos(100808) Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCul48736.

CVE-2015-0609

2015-02-15T19:59:05.010-05:00

2017-09-07T21:29:46.277-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150210 Cisco IOS Measurement, Aggregation, and Correlation Engine Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37420 BID 72564 SECTRACK 1031731 XF ciscoios-cve20150609-dos(100809) Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCuj96752.

cpe:/o:cisco:ios:15.5%281%29t cpe:/o:cisco:ios:15.5%281%29t1 cpe:/o:cisco:ios:15.5%282%29t cpe:/o:cisco:ios:15.5t

CVE-2015-0610

2015-02-11T20:59:26.233-05:00

2017-09-07T21:29:46.340-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150210 Cisco IOS Software Access Control List Bypass Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37423 BID 72565 SECTRACK 1031732 XF ciscoios-cve20150610-sec-bypass(100807) Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCun21071.

cpe:/o:cisco:telepresence_system_software_ix:8.0.0 cpe:/o:cisco:telepresence_system_software_ix:8.0.1

CVE-2015-0611

2015-02-11T20:59:27.187-05:00

2017-09-07T21:29:46.387-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov CISCO 20150210 Cisco TelePresence IX5000 Series Web Management Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37430 BID 72568 SECTRACK 1031733 XF cisco-cve20150611-priv-esc(100806) The administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence IX5000 devices does not properly restrict the device-recovery account's access, which allows remote authenticated users to obtain HelpDesk-equivalent privileges by leveraging device-recovery authentication, aka Bug ID CSCus74174.

cpe:/a:cisco:unity_connection:8.5%281%29 cpe:/a:cisco:unity_connection:8.5%281%29su1 cpe:/a:cisco:unity_connection:8.5%281%29su2 cpe:/a:cisco:unity_connection:8.5%281%29su3 cpe:/a:cisco:unity_connection:8.5%281%29su4 cpe:/a:cisco:unity_connection:8.5%281%29su5 cpe:/a:cisco:unity_connection:8.6%281%29 cpe:/a:cisco:unity_connection:8.6%281a%29 cpe:/a:cisco:unity_connection:8.6%282%29 cpe:/a:cisco:unity_connection:8.6%282a%29 cpe:/a:cisco:unity_connection:8.6%282a%29su1 cpe:/a:cisco:unity_connection:8.6%282a%29su2 cpe:/a:cisco:unity_connection:8.6%282a%29su3 cpe:/a:cisco:unity_connection:9.0%281%29 cpe:/a:cisco:unity_connection:9.1%281%29 cpe:/a:cisco:unity_connection:9.1%282%29 cpe:/a:cisco:unity_connection_8.5:base cpe:/a:cisco:unity_connection_8.6:base

CVE-2015-0612

2015-04-03T14:59:00.067-04:00

2015-09-29T15:32:57.033-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:08:54.210-04:00

CISCO 20150401 Multiple Vulnerabilities in Cisco Unity Connection SECTRACK 1032010 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (SIP outage) via a crafted UDP packet, aka Bug ID CSCuh25062.

cpe:/a:cisco:unity_connection:8.5%281%29 cpe:/a:cisco:unity_connection:8.5%281%29su1 cpe:/a:cisco:unity_connection:8.5%281%29su2 cpe:/a:cisco:unity_connection:8.5%281%29su3 cpe:/a:cisco:unity_connection:8.5%281%29su4 cpe:/a:cisco:unity_connection:8.5%281%29su5 cpe:/a:cisco:unity_connection:8.5%281%29su6 cpe:/a:cisco:unity_connection:8.5_base cpe:/a:cisco:unity_connection:8.6%281%29 cpe:/a:cisco:unity_connection:8.6%281a%29 cpe:/a:cisco:unity_connection:8.6%282%29 cpe:/a:cisco:unity_connection:8.6%282a%29 cpe:/a:cisco:unity_connection:8.6%282a%29su1 cpe:/a:cisco:unity_connection:8.6%282a%29su2 cpe:/a:cisco:unity_connection:8.6%282a%29su3 cpe:/a:cisco:unity_connection:8.6_base cpe:/a:cisco:unity_connection:9.0%281%29 cpe:/a:cisco:unity_connection:9.1%281%29 cpe:/a:cisco:unity_connection:9.1%282%29 cpe:/a:cisco:unity_connection:10.0.0 cpe:/a:cisco:unity_connection:10.0.5

CVE-2015-0613

2015-04-03T14:59:01.490-04:00

2015-09-29T15:32:43.423-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:09:30.020-04:00

CISCO 20150401 Multiple Vulnerabilities in Cisco Unity Connection SECTRACK 1032010 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul20444.

cpe:/a:cisco:unity_connection:8.5%281%29 cpe:/a:cisco:unity_connection:8.5%281%29su1 cpe:/a:cisco:unity_connection:8.5%281%29su2 cpe:/a:cisco:unity_connection:8.5%281%29su3 cpe:/a:cisco:unity_connection:8.5%281%29su4 cpe:/a:cisco:unity_connection:8.5%281%29su5 cpe:/a:cisco:unity_connection:8.5%281%29su6 cpe:/a:cisco:unity_connection:8.5_base cpe:/a:cisco:unity_connection:8.6%281%29 cpe:/a:cisco:unity_connection:8.6%281a%29 cpe:/a:cisco:unity_connection:8.6%282%29 cpe:/a:cisco:unity_connection:8.6%282a%29 cpe:/a:cisco:unity_connection:8.6%282a%29su1 cpe:/a:cisco:unity_connection:8.6%282a%29su2 cpe:/a:cisco:unity_connection:8.6%282a%29su3 cpe:/a:cisco:unity_connection:8.6_base cpe:/a:cisco:unity_connection:9.0%281%29 cpe:/a:cisco:unity_connection:9.1%281%29 cpe:/a:cisco:unity_connection:9.1%282%29 cpe:/a:cisco:unity_connection:10.0.0 cpe:/a:cisco:unity_connection:10.0.5

CVE-2015-0614

2015-04-03T14:59:02.693-04:00

2015-09-29T15:32:18.487-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:09:42.850-04:00

CISCO 20150401 Multiple Vulnerabilities in Cisco Unity Connection SECTRACK 1032010 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) via crafted SIP INVITE messages, aka Bug ID CSCul26267.

cpe:/a:cisco:unity_connection:8.5%281%29 cpe:/a:cisco:unity_connection:8.5%281%29su1 cpe:/a:cisco:unity_connection:8.5%281%29su2 cpe:/a:cisco:unity_connection:8.5%281%29su3 cpe:/a:cisco:unity_connection:8.5%281%29su4 cpe:/a:cisco:unity_connection:8.5%281%29su5 cpe:/a:cisco:unity_connection:8.5%281%29su6 cpe:/a:cisco:unity_connection:8.5_base cpe:/a:cisco:unity_connection:8.6%281%29 cpe:/a:cisco:unity_connection:8.6%281a%29 cpe:/a:cisco:unity_connection:8.6%282%29 cpe:/a:cisco:unity_connection:8.6%282a%29 cpe:/a:cisco:unity_connection:8.6%282a%29su1 cpe:/a:cisco:unity_connection:8.6%282a%29su2 cpe:/a:cisco:unity_connection:8.6%282a%29su3 cpe:/a:cisco:unity_connection:8.6_base cpe:/a:cisco:unity_connection:9.0%281%29 cpe:/a:cisco:unity_connection:9.1%281%29 cpe:/a:cisco:unity_connection:9.1%282%29 cpe:/a:cisco:unity_connection:10.0.0 cpe:/a:cisco:unity_connection:10.0.5

CVE-2015-0615

2015-04-03T14:59:03.787-04:00

2015-09-29T15:31:47.787-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:09:52.507-04:00

CISCO 20150401 Multiple Vulnerabilities in Cisco Unity Connection SECTRACK 1032010 The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (port consumption) by improperly terminating SIP sessions, aka Bug ID CSCul28089.

cpe:/a:cisco:unity_connection:8.5%281%29 cpe:/a:cisco:unity_connection:8.5%281%29su1 cpe:/a:cisco:unity_connection:8.5%281%29su2 cpe:/a:cisco:unity_connection:8.5%281%29su3 cpe:/a:cisco:unity_connection:8.5%281%29su4 cpe:/a:cisco:unity_connection:8.5%281%29su5 cpe:/a:cisco:unity_connection:8.5%281%29su6 cpe:/a:cisco:unity_connection:8.5_base cpe:/a:cisco:unity_connection:8.6%281%29 cpe:/a:cisco:unity_connection:8.6%281a%29 cpe:/a:cisco:unity_connection:8.6%282%29 cpe:/a:cisco:unity_connection:8.6%282a%29 cpe:/a:cisco:unity_connection:8.6%282a%29su1 cpe:/a:cisco:unity_connection:8.6%282a%29su2 cpe:/a:cisco:unity_connection:8.6%282a%29su3 cpe:/a:cisco:unity_connection:8.6_base cpe:/a:cisco:unity_connection:9.0%281%29 cpe:/a:cisco:unity_connection:9.1%281%29 cpe:/a:cisco:unity_connection:9.1%282%29

CVE-2015-0616

2015-04-03T14:59:04.757-04:00

2015-09-29T15:31:33.927-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:09:59.270-04:00

CISCO 20150401 Multiple Vulnerabilities in Cisco Unity Connection SECTRACK 1032010 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration is enabled, allows remote attackers to cause a denial of service (core dump and restart) by improperly terminating SIP TCP connections, aka Bug ID CSCul69819.

cpe:/a:cisco:asr_5000_series_software:-

CVE-2015-0617

2015-02-17T21:59:02.470-05:00

2017-09-07T21:29:46.450-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150216 Cisco ASR 5000 System Architecture Evolution Gateway High CPU Utilization Vulnerability SECTRACK 1031754 XF cisco-asr-cve20150617-dos(100923) Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and SNMP outage) via malformed SNMP packets, aka Bug ID CSCur13393.

cpe:/a:cisco:carrier_routing_system:5.1.3 cpe:/a:cisco:carrier_routing_system:5.1.4 cpe:/o:cisco:ios_xr:5.0.1 cpe:/o:cisco:ios_xr:5.2.1

CVE-2015-0618

2015-02-21T06:59:01.327-05:00

2015-11-27T14:18:36.707-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-11-27T11:26:47.773-05:00

CISCO 20150220 Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability BID 72713 SECTRACK 1031778 Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows remote attackers to cause a denial of service (line-card reload) via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241.

cpe:/a:cisco:adaptive_security_appliance_software:-

CVE-2015-0619

2015-02-11T20:59:38.500-05:00

2017-09-07T21:29:46.497-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150211 Cisco Adaptive Security Appliance WebVPN Embedded Web Server Denial of Service Vulnerability BID 72579 SECTRACK 1031745 XF cisco-asa-cve20150619-dos(100864) Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (memory consumption and SSL outage) via multiple crafted HTTP requests, aka Bug ID CSCue05458.

cpe:/a:cisco:telepresence_management_suite:14.3 cpe:/a:cisco:telepresence_management_suite:14.3%28.1%29 cpe:/a:cisco:telepresence_management_suite:14.3%28.2%29

CVE-2015-0620

2015-02-17T21:59:03.860-05:00

2017-09-07T21:29:46.543-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov CISCO 20150216 Cisco TelePresence Management Suite XML Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37491 SECTRACK 1031753 XF cisco-telepresence-cve20150620-dos(100924) The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494.

cpe:/a:cisco:telepresence_mcu_4500_series_software:4.5%281.45%29

CVE-2015-0621

2015-02-17T21:59:04.737-05:00

2017-09-07T21:29:46.607-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150217 Cisco TelePresence Multipoint Control Unit Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37495 BID 72635 SECTRACK 1031756 XF cisco-telepresence-cve20150621-dos(100936) Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial of service (device reload) via an unspecified series of TCP packets, aka Bug ID CSCur50347.

cpe:/h:cisco:wireless_lan_controller

CVE-2015-0622

2015-02-18T19:59:00.070-05:00

2015-02-19T14:32:14.750-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-02-19T11:11:17.953-05:00

CISCO 20150218 Cisco Wireless LAN Controller Denial of Service Vulnerability The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861.

cpe:/h:cisco:web_security_appliance:-

CVE-2015-0623

2015-02-18T19:59:01.227-05:00

2015-02-19T15:00:14.220-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-02-19T10:52:58.377-05:00

CISCO 20150218 Cisco Web Security Appliance Cross-Site Scripting Vulnerability Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627.

cpe:/h:cisco:content_security_management_appliance:- cpe:/h:cisco:web_security_appliance:- cpe:/o:cisco:email_security_appliance_firmware:-

CVE-2015-0624

2015-02-21T06:59:02.920-05:00

2018-10-30T12:27:22.513-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-27T11:24:30.067-05:00

MISC http://packetstormsecurity.com/files/130525/Cisco-Ironport-AsyncOS-HTTP-Header-Injection.html CISCO 20150220 Cisco AsyncOS Software HTTP Redirect Vulnerability BID 72702 SECTRACK 1031781 SECTRACK 1031782 The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA), and Web Security Appliance (WSA) devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and CSCur89639.

cpe:/a:cisco:hosted_collaboration_solution:-

CVE-2015-0626

2015-02-18T19:59:02.273-05:00

2015-02-19T14:59:55.080-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-02-19T11:00:22.580-05:00

CISCO 20150218 Cisco Hosted Collaboration Solution Unauthorized System Access Vulnerability The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114.

cpe:/h:cisco:web_security_appliance:-

CVE-2015-0628

2015-02-19T21:59:01.723-05:00

2015-02-20T13:37:13.717-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-02-20T11:26:04.037-05:00

CISCO 20150219 Cisco Web Security Appliance HTTP Proxy Bypass Vulnerability The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug ID CSCus79174.

cpe:/a:cisco:ips_sensor_software:7.2%281%29e4 cpe:/a:cisco:ips_sensor_software:7.2%282%29e4

CVE-2015-0631

2015-02-21T06:59:04.027-05:00

2015-03-04T12:14:15.987-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-03-04T10:58:32.237-05:00

CISCO 20150220 Cisco Intrusion Prevention System Key Regeneration HTTPS Denial of Service Vulnerability BID 72700 SECTRACK 1031780 Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.

cpe:/o:cisco:ios:- cpe:/o:cisco:ios_xe:-

CVE-2015-0632

2015-02-26T21:59:33.247-05:00

2015-11-02T13:30:21.703-05:00

5.7

ADJACENT_NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-11-02T12:41:08.837-05:00

CISCO 20150226 Vulnerability in IPv6 Neighbor Discovery in Cisco IOS and IOS-XE Software BID 72797 SECTRACK 1031816 Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770.

cpe:/a:cisco:unified_computing_system:1.4 cpe:/a:cisco:unified_computing_system:1.4%281c%29 cpe:/a:cisco:unified_computing_system:1.4%282%29 cpe:/a:cisco:unified_computing_system:1.4%283c%291 cpe:/a:cisco:unified_computing_system:1.4%283c%292 cpe:/a:cisco:unified_computing_system:1.4%283j%29 cpe:/a:cisco:unified_computing_system:1.4%283k%29 cpe:/a:cisco:unified_computing_system:1.4%283p%29 cpe:/a:cisco:unified_computing_system:1.4%283p%295 cpe:/a:cisco:unified_computing_system:1.4%283s%29 cpe:/a:cisco:unified_computing_system:1.4%284a%29 cpe:/a:cisco:unified_computing_system:1.4%284a%291 cpe:/a:cisco:unified_computing_system:1.4%285b%291 cpe:/a:cisco:unified_computing_system:1.4%285e%29 cpe:/a:cisco:unified_computing_system:1.4%285g%29 cpe:/a:cisco:unified_computing_system:1.4%285g%292 cpe:/a:cisco:unified_computing_system:1.4%285h%29 cpe:/a:cisco:unified_computing_system:1.4%285j%29 cpe:/a:cisco:unified_computing_system:1.4%286c%29 cpe:/a:cisco:unified_computing_system:1.4%286d%29 cpe:/a:cisco:unified_computing_system:1.4%287b%291 cpe:/a:cisco:unified_computing_system:1.4%287c%291 cpe:/a:cisco:unified_computing_system:1.4%287h%29

CVE-2015-0633

2015-02-25T20:59:00.063-05:00

2019-04-15T08:30:08.180-04:00

6.8

ADJACENT_NETWORK

LOW

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov CISCO 20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37575 BID 72760 BID 85711 SECTRACK 1031796 The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.

cpe:/a:cisco:webex_meetings_server:2.5 cpe:/a:cisco:webex_meetings_server:2.5.0.997

CVE-2015-0634

2015-05-14T21:59:01.957-04:00

2017-01-06T12:20:36.843-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:34:27.550-05:00

CISCO 20150513 Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability BID 74647 SECTRACK 1032329 Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310.

cpe:/o:cisco:ios:12.2%2833%29ird1 cpe:/o:cisco:ios:12.2%2833%29ire3 cpe:/o:cisco:ios:12.2%2833%29sxi4b cpe:/o:cisco:ios:12.2%2844%29sq1 cpe:/o:cisco:ios:12.4%2825e%29jam1 cpe:/o:cisco:ios:12.4%2825e%29jap1m cpe:/o:cisco:ios:12.4%2825e%29jaz1 cpe:/o:cisco:ios:15.0%282%29ed1 cpe:/o:cisco:ios:15.2%281%29ex cpe:/o:cisco:ios:15.2%282%29jb1 cpe:/o:cisco:ios:15.3%282%29s2 cpe:/o:cisco:ios:15.3%283%29ja1n cpe:/o:cisco:ios:15.3%283%29jab1 cpe:/o:cisco:ios:15.3%283%29jn cpe:/o:cisco:ios:15.3%283%29jnb cpe:/o:cisco:ios:15.3%283%29s cpe:/o:cisco:ios:15.3%283%29s1 cpe:/o:cisco:ios:15.3%283%29s2 cpe:/o:cisco:ios:15.3%283%29s3 cpe:/o:cisco:ios:15.3%283%29s4 cpe:/o:cisco:ios:15.3%283%29s5 cpe:/o:cisco:ios:15.4%281%29s cpe:/o:cisco:ios:15.4%281%29s1 cpe:/o:cisco:ios:15.4%281%29s2 cpe:/o:cisco:ios:15.4%281%29s3 cpe:/o:cisco:ios:15.4%282%29s cpe:/o:cisco:ios:15.4%282%29s1 cpe:/o:cisco:ios:15.4%282%29s2 cpe:/o:cisco:ios:15.4%283%29s cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.10s.3 cpe:/o:cisco:ios_xe:3.10s.4 cpe:/o:cisco:ios_xe:3.10s.5 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1 cpe:/o:cisco:ios_xe:3.11s.2 cpe:/o:cisco:ios_xe:3.11s.3 cpe:/o:cisco:ios_xe:3.12s.0 cpe:/o:cisco:ios_xe:3.12s.1 cpe:/o:cisco:ios_xe:3.12s.2 cpe:/o:cisco:ios_xe:3.13s.0

CVE-2015-0635

2015-03-26T06:59:00.067-04:00

2015-10-01T13:13:36.103-04:00

9.0

NETWORK

LOW

NONE

PARTIAL

COMPLETE

http://nvd.nist.gov

2015-10-01T12:09:21.753-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure SECTRACK 1031982 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191.

CVE-2015-0636

2015-03-26T06:59:02.473-04:00

2015-10-01T13:13:51.290-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-01T12:09:16.207-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure SECTRACK 1031982 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (disrupted domain access) via spoofed AN messages that reset a finite state machine, aka Bug ID CSCup62293.

cpe:/o:cisco:ios:12.2%2833%29ird1 cpe:/o:cisco:ios:12.2%2833%29ire3 cpe:/o:cisco:ios:12.2%2833%29sxi4b cpe:/o:cisco:ios:12.2%2844%29sq1 cpe:/o:cisco:ios:12.4%2825e%29jam1 cpe:/o:cisco:ios:12.4%2825e%29jap1m cpe:/o:cisco:ios:12.4%2825e%29jaz1 cpe:/o:cisco:ios:15.0%282%29ed1 cpe:/o:cisco:ios:15.2%281%29ex cpe:/o:cisco:ios:15.2%282%29jb1 cpe:/o:cisco:ios:15.3%282%29s2 cpe:/o:cisco:ios:15.3%283%29ja1n cpe:/o:cisco:ios:15.3%283%29jab1 cpe:/o:cisco:ios:15.3%283%29jn cpe:/o:cisco:ios:15.3%283%29jnb cpe:/o:cisco:ios:15.3%283%29s cpe:/o:cisco:ios:15.3%283%29s1 cpe:/o:cisco:ios:15.3%283%29s2 cpe:/o:cisco:ios:15.3%283%29s3 cpe:/o:cisco:ios:15.3%283%29s4 cpe:/o:cisco:ios:15.4%281%29s cpe:/o:cisco:ios:15.4%281%29s1 cpe:/o:cisco:ios:15.4%281%29s2 cpe:/o:cisco:ios:15.4%281%29s3 cpe:/o:cisco:ios:15.4%282%29s cpe:/o:cisco:ios:15.4%282%29s1 cpe:/o:cisco:ios:15.4%282%29s2 cpe:/o:cisco:ios:15.4%283%29s cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.10s.3 cpe:/o:cisco:ios_xe:3.10s.4 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1 cpe:/o:cisco:ios_xe:3.11s.2 cpe:/o:cisco:ios_xe:3.11s.3 cpe:/o:cisco:ios_xe:3.12s.0 cpe:/o:cisco:ios_xe:3.12s.1 cpe:/o:cisco:ios_xe:3.12s.2 cpe:/o:cisco:ios_xe:3.13s.0

CVE-2015-0637

2015-03-26T06:59:03.427-04:00

2015-10-01T13:14:04.900-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-01T12:09:10.303-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure SECTRACK 1031982 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages, aka Bug ID CSCup62315.

CVE-2015-0638

2015-03-26T06:59:04.443-04:00

2015-09-04T14:50:50.547-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:45:52.060-04:00

CISCO 20150325 Cisco IOS Software Virtual Routing and Forwarding ICMP Queue Wedge Vulnerability SECTRACK 1031983 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets, aka Bug ID CSCsi02145.

cpe:/o:cisco:ios_xe:3.6s cpe:/o:cisco:ios_xe:3.6s.0 cpe:/o:cisco:ios_xe:3.6s.1 cpe:/o:cisco:ios_xe:3.6s.2 cpe:/o:cisco:ios_xe:3.7s cpe:/o:cisco:ios_xe:3.7s.0 cpe:/o:cisco:ios_xe:3.7s.1 cpe:/o:cisco:ios_xe:3.7s.2 cpe:/o:cisco:ios_xe:3.7s.3 cpe:/o:cisco:ios_xe:3.7s.4 cpe:/o:cisco:ios_xe:3.7s.5

CVE-2015-0639

2015-03-26T06:59:05.410-04:00

2015-09-04T14:51:05.907-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:45:58.217-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers SECTRACK 1031981 The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation, aka Bug ID CSCua79665.

cpe:/o:cisco:ios_xe:3.1s.0 cpe:/o:cisco:ios_xe:3.1s.1 cpe:/o:cisco:ios_xe:3.1s.2 cpe:/o:cisco:ios_xe:3.1s.3 cpe:/o:cisco:ios_xe:3.1s.4 cpe:/o:cisco:ios_xe:3.1s.5 cpe:/o:cisco:ios_xe:3.1s.6 cpe:/o:cisco:ios_xe:3.2s.0 cpe:/o:cisco:ios_xe:3.2s.1 cpe:/o:cisco:ios_xe:3.2s.2 cpe:/o:cisco:ios_xe:3.2s.3 cpe:/o:cisco:ios_xe:3.3s.0 cpe:/o:cisco:ios_xe:3.3s.1 cpe:/o:cisco:ios_xe:3.3s.2 cpe:/o:cisco:ios_xe:3.5s cpe:/o:cisco:ios_xe:3.5s.0 cpe:/o:cisco:ios_xe:3.5s.1 cpe:/o:cisco:ios_xe:3.5s.2 cpe:/o:cisco:ios_xe:3.6s cpe:/o:cisco:ios_xe:3.6s.0 cpe:/o:cisco:ios_xe:3.6s.1 cpe:/o:cisco:ios_xe:3.6s.2 cpe:/o:cisco:ios_xe:3.7s cpe:/o:cisco:ios_xe:3.7s.0 cpe:/o:cisco:ios_xe:3.7s.1 cpe:/o:cisco:ios_xe:3.7s.2 cpe:/o:cisco:ios_xe:3.7s.3 cpe:/o:cisco:ios_xe:3.7s.4 cpe:/o:cisco:ios_xe:3.7s.5 cpe:/o:cisco:ios_xe:3.7s.6 cpe:/o:cisco:ios_xe:3.7s.7 cpe:/o:cisco:ios_xe:3.8s cpe:/o:cisco:ios_xe:3.8s.0 cpe:/o:cisco:ios_xe:3.8s.1 cpe:/o:cisco:ios_xe:3.8s.2 cpe:/o:cisco:ios_xe:3.9s.0 cpe:/o:cisco:ios_xe:3.9s.1 cpe:/o:cisco:ios_xe:3.9s.2 cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.0a cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.10s.3 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1 cpe:/o:cisco:ios_xe:3.11s.2 cpe:/o:cisco:ios_xe:3.12s.0 cpe:/o:cisco:ios_xe:3.12s.1

CVE-2015-0640

2015-03-26T06:59:06.270-04:00

2015-09-04T14:51:13.420-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:43:22.147-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers SECTRACK 1031981 The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via large IP packets that require NAT and HSL processing after fragmentation, aka Bug ID CSCuo25741.

cpe:/o:cisco:ios_xe:3.1s.0 cpe:/o:cisco:ios_xe:3.1s.1 cpe:/o:cisco:ios_xe:3.1s.2 cpe:/o:cisco:ios_xe:3.1s.3 cpe:/o:cisco:ios_xe:3.1s.4 cpe:/o:cisco:ios_xe:3.1s.5 cpe:/o:cisco:ios_xe:3.1s.6 cpe:/o:cisco:ios_xe:3.2s.0 cpe:/o:cisco:ios_xe:3.2s.1 cpe:/o:cisco:ios_xe:3.2s.2 cpe:/o:cisco:ios_xe:3.2s.3 cpe:/o:cisco:ios_xe:3.3s.0 cpe:/o:cisco:ios_xe:3.3s.1 cpe:/o:cisco:ios_xe:3.3s.2 cpe:/o:cisco:ios_xe:3.4s.0 cpe:/o:cisco:ios_xe:3.4s.1 cpe:/o:cisco:ios_xe:3.4s.2 cpe:/o:cisco:ios_xe:3.4s.3 cpe:/o:cisco:ios_xe:3.4s.4 cpe:/o:cisco:ios_xe:3.4s.5 cpe:/o:cisco:ios_xe:3.4s.6 cpe:/o:cisco:ios_xe:3.5s cpe:/o:cisco:ios_xe:3.5s.0 cpe:/o:cisco:ios_xe:3.5s.1 cpe:/o:cisco:ios_xe:3.5s.2 cpe:/o:cisco:ios_xe:3.6s cpe:/o:cisco:ios_xe:3.6s.0 cpe:/o:cisco:ios_xe:3.6s.1 cpe:/o:cisco:ios_xe:3.6s.2 cpe:/o:cisco:ios_xe:3.7s cpe:/o:cisco:ios_xe:3.7s.0 cpe:/o:cisco:ios_xe:3.7s.1 cpe:/o:cisco:ios_xe:3.7s.2 cpe:/o:cisco:ios_xe:3.7s.3 cpe:/o:cisco:ios_xe:3.7s.4 cpe:/o:cisco:ios_xe:3.7s.5 cpe:/o:cisco:ios_xe:3.7s.6 cpe:/o:cisco:ios_xe:3.7s.7 cpe:/o:cisco:ios_xe:3.8s cpe:/o:cisco:ios_xe:3.8s.0 cpe:/o:cisco:ios_xe:3.8s.1 cpe:/o:cisco:ios_xe:3.8s.2

CVE-2015-0641

2015-03-26T06:59:07.020-04:00

2015-09-04T14:51:27.640-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:43:10.880-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers SECTRACK 1031981 Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via crafted IPv6 packets, aka Bug ID CSCub68073.

cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:15.0 cpe:/o:cisco:ios:15.1 cpe:/o:cisco:ios:15.2 cpe:/o:cisco:ios:15.3 cpe:/o:cisco:ios:15.4 cpe:/o:cisco:ios_xe:2.5.0 cpe:/o:cisco:ios_xe:2.5.1 cpe:/o:cisco:ios_xe:3.1s.0 cpe:/o:cisco:ios_xe:3.1s.1 cpe:/o:cisco:ios_xe:3.1s.2 cpe:/o:cisco:ios_xe:3.1s.3 cpe:/o:cisco:ios_xe:3.1s.4 cpe:/o:cisco:ios_xe:3.2s.0 cpe:/o:cisco:ios_xe:3.2s.1 cpe:/o:cisco:ios_xe:3.2s.2 cpe:/o:cisco:ios_xe:3.3s.0 cpe:/o:cisco:ios_xe:3.3s.1 cpe:/o:cisco:ios_xe:3.3s.2 cpe:/o:cisco:ios_xe:3.3sg.0 cpe:/o:cisco:ios_xe:3.3sg.1 cpe:/o:cisco:ios_xe:3.3sg.2 cpe:/o:cisco:ios_xe:3.3xo.0 cpe:/o:cisco:ios_xe:3.3xo.1 cpe:/o:cisco:ios_xe:3.3xo.2 cpe:/o:cisco:ios_xe:3.4s.0 cpe:/o:cisco:ios_xe:3.4s.1 cpe:/o:cisco:ios_xe:3.4s.2 cpe:/o:cisco:ios_xe:3.4s.3 cpe:/o:cisco:ios_xe:3.4s.4 cpe:/o:cisco:ios_xe:3.4s.5 cpe:/o:cisco:ios_xe:3.4s.6 cpe:/o:cisco:ios_xe:3.4sg.0 cpe:/o:cisco:ios_xe:3.4sg.1 cpe:/o:cisco:ios_xe:3.4sg.2 cpe:/o:cisco:ios_xe:3.4sg.3 cpe:/o:cisco:ios_xe:3.4sg.4 cpe:/o:cisco:ios_xe:3.4sg.5 cpe:/o:cisco:ios_xe:3.5e.0 cpe:/o:cisco:ios_xe:3.5e.1 cpe:/o:cisco:ios_xe:3.5e.2 cpe:/o:cisco:ios_xe:3.5e.3 cpe:/o:cisco:ios_xe:3.5s.0 cpe:/o:cisco:ios_xe:3.5s.1 cpe:/o:cisco:ios_xe:3.5s_base cpe:/o:cisco:ios_xe:3.6e.0 cpe:/o:cisco:ios_xe:3.6e.1 cpe:/o:cisco:ios_xe:3.6s.0 cpe:/o:cisco:ios_xe:3.6s.1 cpe:/o:cisco:ios_xe:3.6s.2 cpe:/o:cisco:ios_xe:3.6s_base cpe:/o:cisco:ios_xe:3.7e.0 cpe:/o:cisco:ios_xe:3.7s.0 cpe:/o:cisco:ios_xe:3.7s.1 cpe:/o:cisco:ios_xe:3.7s.2 cpe:/o:cisco:ios_xe:3.7s.3 cpe:/o:cisco:ios_xe:3.7s.4 cpe:/o:cisco:ios_xe:3.7s.5 cpe:/o:cisco:ios_xe:3.7s.6 cpe:/o:cisco:ios_xe:3.7s_base cpe:/o:cisco:ios_xe:3.8s.0 cpe:/o:cisco:ios_xe:3.8s.1 cpe:/o:cisco:ios_xe:3.8s.2 cpe:/o:cisco:ios_xe:3.8s_base cpe:/o:cisco:ios_xe:3.9s.0 cpe:/o:cisco:ios_xe:3.9s.1 cpe:/o:cisco:ios_xe:3.9s.2 cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.0a cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.10s.3 cpe:/o:cisco:ios_xe:3.10s.4 cpe:/o:cisco:ios_xe:3.10s.5 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1 cpe:/o:cisco:ios_xe:3.11s.2 cpe:/o:cisco:ios_xe:3.11s.3 cpe:/o:cisco:ios_xe:3.12s.0 cpe:/o:cisco:ios_xe:3.12s.1 cpe:/o:cisco:ios_xe:3.12s.2 cpe:/o:cisco:ios_xe:3.13s.0 cpe:/o:cisco:ios_xe:3.13s.1

CVE-2015-0642

2015-03-26T06:59:07.927-04:00

2017-05-11T21:29:00.217-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150325 Cisco IOS Software and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerabilities CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37816 BID 73333 SECTRACK 1031978 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951.

cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.4 cpe:/o:cisco:ios:15.0 cpe:/o:cisco:ios:15.1 cpe:/o:cisco:ios:15.2 cpe:/o:cisco:ios:15.3 cpe:/o:cisco:ios:15.4 cpe:/o:cisco:ios_xe:3.2s.0 cpe:/o:cisco:ios_xe:3.2s.1 cpe:/o:cisco:ios_xe:3.2s.2 cpe:/o:cisco:ios_xe:3.3sg.0 cpe:/o:cisco:ios_xe:3.3sg.1 cpe:/o:cisco:ios_xe:3.3sg.2 cpe:/o:cisco:ios_xe:3.3xo.0 cpe:/o:cisco:ios_xe:3.3xo.1 cpe:/o:cisco:ios_xe:3.3xo.2 cpe:/o:cisco:ios_xe:3.4s.0 cpe:/o:cisco:ios_xe:3.4s.1 cpe:/o:cisco:ios_xe:3.4s.2 cpe:/o:cisco:ios_xe:3.4s.3 cpe:/o:cisco:ios_xe:3.4s.4 cpe:/o:cisco:ios_xe:3.4s.5 cpe:/o:cisco:ios_xe:3.4s.6 cpe:/o:cisco:ios_xe:3.4sg.0 cpe:/o:cisco:ios_xe:3.4sg.1 cpe:/o:cisco:ios_xe:3.4sg.2 cpe:/o:cisco:ios_xe:3.4sg.3 cpe:/o:cisco:ios_xe:3.4sg.4 cpe:/o:cisco:ios_xe:3.4sg.5 cpe:/o:cisco:ios_xe:3.5e.0 cpe:/o:cisco:ios_xe:3.5e.1 cpe:/o:cisco:ios_xe:3.5e.2 cpe:/o:cisco:ios_xe:3.5e.3 cpe:/o:cisco:ios_xe:3.5s.0 cpe:/o:cisco:ios_xe:3.5s.1 cpe:/o:cisco:ios_xe:3.5s.2 cpe:/o:cisco:ios_xe:3.5s_base cpe:/o:cisco:ios_xe:3.6e.0 cpe:/o:cisco:ios_xe:3.6e.1 cpe:/o:cisco:ios_xe:3.6s.0 cpe:/o:cisco:ios_xe:3.6s.1 cpe:/o:cisco:ios_xe:3.6s.2 cpe:/o:cisco:ios_xe:3.6s_base cpe:/o:cisco:ios_xe:3.7s.1 cpe:/o:cisco:ios_xe:3.7s.2 cpe:/o:cisco:ios_xe:3.7s.3 cpe:/o:cisco:ios_xe:3.7s.4 cpe:/o:cisco:ios_xe:3.7s.5 cpe:/o:cisco:ios_xe:3.7s.6 cpe:/o:cisco:ios_xe:3.7s_base cpe:/o:cisco:ios_xe:3.8s.0 cpe:/o:cisco:ios_xe:3.8s.1 cpe:/o:cisco:ios_xe:3.8s.2 cpe:/o:cisco:ios_xe:3.8s_base cpe:/o:cisco:ios_xe:3.9s.0 cpe:/o:cisco:ios_xe:3.9s.1 cpe:/o:cisco:ios_xe:3.9s.2 cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.0a cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1

CVE-2015-0643

2015-03-26T06:59:08.847-04:00

2017-05-11T21:29:00.293-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150325 Cisco IOS Software and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerabilities CONFIRM http://tools.cisco.com/security/center/viewAlert.x?alertId=37815 BID 73333 SECTRACK 1031978 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (memory consumption and device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuo75572.

cpe:/o:cisco:ios_xe:3.8s.0 cpe:/o:cisco:ios_xe:3.8s.1 cpe:/o:cisco:ios_xe:3.8s.2 cpe:/o:cisco:ios_xe:3.8s_base cpe:/o:cisco:ios_xe:3.9s.0 cpe:/o:cisco:ios_xe:3.9s.1 cpe:/o:cisco:ios_xe:3.9s.2 cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.0a cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1 cpe:/o:cisco:ios_xe:3.11s.2 cpe:/o:cisco:ios_xe:3.12s.0

CVE-2015-0644

2015-03-26T06:59:09.847-04:00

2015-09-04T14:55:13.630-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:41:41.993-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers SECTRACK 1031981 AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.

cpe:/o:cisco:ios_xe:3.1s.0 cpe:/o:cisco:ios_xe:3.1s.1 cpe:/o:cisco:ios_xe:3.1s.2 cpe:/o:cisco:ios_xe:3.1s.3 cpe:/o:cisco:ios_xe:3.1s.4 cpe:/o:cisco:ios_xe:3.1s.5 cpe:/o:cisco:ios_xe:3.1s.6 cpe:/o:cisco:ios_xe:3.2s.0 cpe:/o:cisco:ios_xe:3.2s.1 cpe:/o:cisco:ios_xe:3.2s.2 cpe:/o:cisco:ios_xe:3.2s.3 cpe:/o:cisco:ios_xe:3.3s.0 cpe:/o:cisco:ios_xe:3.3s.1 cpe:/o:cisco:ios_xe:3.3s.2 cpe:/o:cisco:ios_xe:3.4s.0 cpe:/o:cisco:ios_xe:3.4s.1 cpe:/o:cisco:ios_xe:3.4s.2 cpe:/o:cisco:ios_xe:3.4s.3 cpe:/o:cisco:ios_xe:3.4s.4 cpe:/o:cisco:ios_xe:3.4s.5 cpe:/o:cisco:ios_xe:3.4s.6 cpe:/o:cisco:ios_xe:3.5s.0 cpe:/o:cisco:ios_xe:3.5s.1 cpe:/o:cisco:ios_xe:3.5s.2 cpe:/o:cisco:ios_xe:3.5s_base cpe:/o:cisco:ios_xe:3.6s.0 cpe:/o:cisco:ios_xe:3.6s.1 cpe:/o:cisco:ios_xe:3.6s.2 cpe:/o:cisco:ios_xe:3.6s_base cpe:/o:cisco:ios_xe:3.10s.0 cpe:/o:cisco:ios_xe:3.10s.0a cpe:/o:cisco:ios_xe:3.10s.1 cpe:/o:cisco:ios_xe:3.10s.2 cpe:/o:cisco:ios_xe:3.10s.3 cpe:/o:cisco:ios_xe:3.11s.0 cpe:/o:cisco:ios_xe:3.11s.1 cpe:/o:cisco:ios_xe:3.11s.2 cpe:/o:cisco:ios_xe:3.12s.0 cpe:/o:cisco:ios_xe:3.12s.1 cpe:/o:cisco:ios_xe:3.13s.0

CVE-2015-0645

2015-03-26T06:59:10.753-04:00

2015-09-04T14:57:06.397-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:41:34.603-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers SECTRACK 1031981 The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131.

CVE-2015-0646

2015-03-26T06:59:11.613-04:00

2017-05-11T21:29:00.357-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150325 Cisco IOS Software and IOS XE Software TCP Packet Memory Leak Vulnerability BID 73340 SECTRACK 1031980 Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.

cpe:/o:cisco:ios:12.2%2833%29ird1 cpe:/o:cisco:ios:12.2%2833%29ire3 cpe:/o:cisco:ios:12.2%2833%29sxi4b cpe:/o:cisco:ios:12.2%2844%29ex cpe:/o:cisco:ios:12.2%2844%29ex1 cpe:/o:cisco:ios:12.2%2844%29sq1 cpe:/o:cisco:ios:12.2%2846%29se cpe:/o:cisco:ios:12.2%2846%29se1 cpe:/o:cisco:ios:12.2%2846%29se2 cpe:/o:cisco:ios:12.2%2850%29se cpe:/o:cisco:ios:12.2%2850%29se1 cpe:/o:cisco:ios:12.2%2850%29se2 cpe:/o:cisco:ios:12.2%2850%29se3 cpe:/o:cisco:ios:12.2%2850%29se4 cpe:/o:cisco:ios:12.2%2850%29se5 cpe:/o:cisco:ios:12.2%2852%29se cpe:/o:cisco:ios:12.2%2852%29se1 cpe:/o:cisco:ios:12.2%2855%29se cpe:/o:cisco:ios:12.2%2855%29se3 cpe:/o:cisco:ios:12.2%2855%29se4 cpe:/o:cisco:ios:12.2%2855%29se5 cpe:/o:cisco:ios:12.2%2855%29se6 cpe:/o:cisco:ios:12.2%2855%29se7 cpe:/o:cisco:ios:12.2%2855%29se8 cpe:/o:cisco:ios:12.2%2855%29se9 cpe:/o:cisco:ios:12.2%2858%29se2 cpe:/o:cisco:ios:12.4%2825e%29jam1 cpe:/o:cisco:ios:12.4%2825e%29jap1m cpe:/o:cisco:ios:12.4%2825e%29jaz1 cpe:/o:cisco:ios:15.0%281%29ey cpe:/o:cisco:ios:15.0%281%29ey1 cpe:/o:cisco:ios:15.0%281%29ey2 cpe:/o:cisco:ios:15.0%282%29eb cpe:/o:cisco:ios:15.0%282%29ed1 cpe:/o:cisco:ios:15.0%282%29ey cpe:/o:cisco:ios:15.0%282%29ey1 cpe:/o:cisco:ios:15.0%282%29ey2 cpe:/o:cisco:ios:15.0%282%29ey3 cpe:/o:cisco:ios:15.0%282%29se cpe:/o:cisco:ios:15.0%282%29se1 cpe:/o:cisco:ios:15.0%282%29se2 cpe:/o:cisco:ios:15.0%282%29se3 cpe:/o:cisco:ios:15.0%282%29se4 cpe:/o:cisco:ios:15.0%282%29se5 cpe:/o:cisco:ios:15.0%282%29se6 cpe:/o:cisco:ios:15.0%282%29se7 cpe:/o:cisco:ios:15.2%281%29ex cpe:/o:cisco:ios:15.2%281%29ey cpe:/o:cisco:ios:15.2%282%29e1 cpe:/o:cisco:ios:15.2%282%29jb1 cpe:/o:cisco:ios:15.3%282%29s2 cpe:/o:cisco:ios:15.3%283%29ja cpe:/o:cisco:ios:15.3%283%29ja1 cpe:/o:cisco:ios:15.3%283%29ja1m cpe:/o:cisco:ios:15.3%283%29ja1n cpe:/o:cisco:ios:15.3%283%29jaa cpe:/o:cisco:ios:15.3%283%29jab cpe:/o:cisco:ios:15.3%283%29jab1 cpe:/o:cisco:ios:15.3%283%29jnb

CVE-2015-0647

2015-03-26T06:59:12.473-04:00

2015-03-26T14:26:26.130-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-03-26T13:54:50.217-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS Software Common Industrial Protocol Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug ID CSCum98371.

cpe:/o:cisco:ios:12.2%2833%29ird1 cpe:/o:cisco:ios:12.2%2833%29ire3 cpe:/o:cisco:ios:12.2%2833%29sxi4b cpe:/o:cisco:ios:12.2%2844%29ex cpe:/o:cisco:ios:12.2%2844%29ex1 cpe:/o:cisco:ios:12.2%2844%29sq1 cpe:/o:cisco:ios:12.2%2846%29se cpe:/o:cisco:ios:12.2%2846%29se1 cpe:/o:cisco:ios:12.2%2846%29se2 cpe:/o:cisco:ios:12.2%2850%29se cpe:/o:cisco:ios:12.2%2850%29se1 cpe:/o:cisco:ios:12.2%2850%29se2 cpe:/o:cisco:ios:12.2%2850%29se3 cpe:/o:cisco:ios:12.2%2850%29se4 cpe:/o:cisco:ios:12.2%2850%29se5 cpe:/o:cisco:ios:12.2%2852%29se cpe:/o:cisco:ios:12.2%2852%29se1 cpe:/o:cisco:ios:12.2%2855%29se cpe:/o:cisco:ios:12.2%2855%29se3 cpe:/o:cisco:ios:12.2%2855%29se4 cpe:/o:cisco:ios:12.2%2855%29se5 cpe:/o:cisco:ios:12.2%2855%29se6 cpe:/o:cisco:ios:12.2%2855%29se7 cpe:/o:cisco:ios:12.2%2855%29se8 cpe:/o:cisco:ios:12.2%2855%29se9 cpe:/o:cisco:ios:12.2%2858%29se2 cpe:/o:cisco:ios:12.4%2825e%29jam1 cpe:/o:cisco:ios:12.4%2825e%29jap1m cpe:/o:cisco:ios:12.4%2825e%29jaz1 cpe:/o:cisco:ios:15.0%281%29ey cpe:/o:cisco:ios:15.0%281%29ey1 cpe:/o:cisco:ios:15.0%281%29ey2 cpe:/o:cisco:ios:15.0%282%29eb cpe:/o:cisco:ios:15.0%282%29ed1 cpe:/o:cisco:ios:15.0%282%29ey cpe:/o:cisco:ios:15.0%282%29ey1 cpe:/o:cisco:ios:15.0%282%29ey2 cpe:/o:cisco:ios:15.0%282%29ey3 cpe:/o:cisco:ios:15.0%282%29se cpe:/o:cisco:ios:15.0%282%29se1 cpe:/o:cisco:ios:15.0%282%29se2 cpe:/o:cisco:ios:15.0%282%29se3 cpe:/o:cisco:ios:15.0%282%29se4 cpe:/o:cisco:ios:15.0%282%29se5 cpe:/o:cisco:ios:15.0%282%29se6 cpe:/o:cisco:ios:15.0%282%29se7 cpe:/o:cisco:ios:15.2%281%29ex cpe:/o:cisco:ios:15.2%281%29ey cpe:/o:cisco:ios:15.2%282%29e cpe:/o:cisco:ios:15.2%282%29e1 cpe:/o:cisco:ios:15.2%282%29jb1 cpe:/o:cisco:ios:15.3%282%29s2 cpe:/o:cisco:ios:15.3%283%29ja cpe:/o:cisco:ios:15.3%283%29ja1 cpe:/o:cisco:ios:15.3%283%29ja1m cpe:/o:cisco:ios:15.3%283%29ja1n cpe:/o:cisco:ios:15.3%283%29jaa cpe:/o:cisco:ios:15.3%283%29jab cpe:/o:cisco:ios:15.3%283%29jab1 cpe:/o:cisco:ios:15.3%283%29jn cpe:/o:cisco:ios:15.3%283%29jnb

CVE-2015-0648

2015-03-26T06:59:13.270-04:00

2015-03-26T13:52:58.000-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-03-26T13:42:08.587-04:00

CISCO 20150325 Multiple Vulnerabilities in Cisco IOS Software Common Industrial Protocol Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun49658.

cpe:/o:cisco:ios:12.2%2833%29ird1 cpe:/o:cisco:ios:12.2%2833%29ire3 cpe:/o:cisco:ios:12.2%2833%29sxi4b cpe:/o:cisco:ios:12.2%2844%29sq1 cpe:/o:cisco:ios:12.2%2852%29se cpe:/o:cisco:ios:12.2%2852%29se1 cpe:/o:cisco:ios:12.2%2855%29se cpe:/o:cisco:ios:12.2%2855%29se3 cpe:/o:cisco:ios:12.2%2855%29se4 cpe:/o:cisco:ios:12.2%2855%29se5 cpe:/o:cisco:ios:12.2%2855%29se6 cpe:/o:cisco:ios:12.2%2855%29se7 cpe:/o:cisco:ios:12.2%2855%29se8 cpe:/o:cisco:ios:12.2%2855%29se9 cpe:/o:cisco:ios:12.2%2858%29se2 cpe:/o:cisco:ios:12.4%2825e%29jam1 cpe:/o:cisco:ios:12.4%2825e%29jap1m cpe:/o:cisco:ios:12.4%2825e%29jaz1 cpe:/o:cisco:ios:15.0%281%29ey cpe:/o:cisco:ios:15.0%281%29ey1 cpe:/o:cisco:ios:15.0%281%29ey2 cpe:/o:cisco:ios:15.0%282%29eb cpe:/o:cisco:ios:15.0%282%29ed1 cpe:/o:cisco:ios:15.0%282%29ey cpe:/o:cisco:ios:15.0%282%29ey1 cpe:/o:cisco:ios:15.0%282%29ey2 cpe:/o:cisco:ios:15.0%282%29ey3 cpe:/o:cisco:ios:15.0%282%29se cpe:/o:cisco:ios:15.0%282%29se1 cpe:/o:cisco:ios:15.0%282%29se2 cpe:/o:cisco:ios:15.0%282%29se3 cpe:/o:cisco:ios:15.0%282%29se4 cpe:/o:cisco:ios:15.0%282%29se5 cpe:/o:cisco:ios:15.0%282%29se6 cpe:/o:cisco:ios:15.0%282%29se7 cpe:/o:cisco:ios:15.2%281%29ex cpe:/o:cisco:ios:15.2%281%29ey cpe:/o:cisco:ios:15.2%282%29e cpe:/o:cisco:ios:15.2%282%29e1 cpe:/o:cisco:ios:15.2%282%29jb1 cpe:/o:cisco:ios:15.3%282%29s2 cpe:/o:cisco:ios:15.3%283%29ja1n cpe:/o:cisco:ios:15.3%283%29jab1 cpe:/o:cisco:ios:15.3%283%29jn cpe:/o:cisco:ios:15.3%283%29jnb

CVE-2015-0649

2015-03-26T06:59:14.037-04:00

2015-03-27T03:33:16.003-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-03-26T14:33:51.420-04:00

CVE-2015-0650

2015-03-26T06:59:14.990-04:00

2015-09-04T14:57:35.183-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-04T14:35:13.637-04:00

CISCO 20150325 Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability SECTRACK 1031979 The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCup70579.

cpe:/a:cisco:application_networking_manager:-

CVE-2015-0651

2015-02-26T21:59:34.167-05:00

2015-11-02T13:29:56.257-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-11-02T12:41:40.010-05:00

CISCO 20150226 Cisco ACE 4710 Application Control Engine and Application Neworking Manager Cross-Site Request Forgery Vulnerability BID 72796 SECTRACK 1031815 Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.

cpe:/a:cisco:expressway_software:x8.1.1 cpe:/a:cisco:telepresence_conductor:xc2.4:prealpha0 cpe:/a:cisco:telepresence_video_communication_server_software:x8.1.1

CVE-2015-0652

2015-03-12T21:59:31.523-04:00

2015-09-11T11:45:22.507-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-11T10:58:44.940-04:00

CISCO 20150311 Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor SECTRACK 1031910 The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cisco TelePresence Conductor before XC2.4 allows remote attackers to cause a denial of service (mishandled exception and device reload) via a crafted media description, aka Bug IDs CSCus96593 and CSCun73192.

cpe:/a:cisco:expressway_software:x7.2.3 cpe:/a:cisco:expressway_software:x8.1 cpe:/a:cisco:expressway_software:x8.1.1 cpe:/a:cisco:expressway_software:x8.2.1 cpe:/a:cisco:telepresence_conductor:xc2.4:prealpha0 cpe:/a:cisco:telepresence_video_communication_server_software:x7.2 cpe:/a:cisco:telepresence_video_communication_server_software:x7.2.1 cpe:/a:cisco:telepresence_video_communication_server_software:x7.2.2 cpe:/a:cisco:telepresence_video_communication_server_software:x7.2.3 cpe:/a:cisco:telepresence_video_communication_server_software:x8.1 cpe:/a:cisco:telepresence_video_communication_server_software:x8.1::~~base~~~ cpe:/a:cisco:telepresence_video_communication_server_software:x8.1.1 cpe:/a:cisco:telepresence_video_communication_server_software:x8.2::~~base~~~ cpe:/a:cisco:telepresence_video_communication_server_software:x8.2.1

CVE-2015-0653

2015-03-12T21:59:32.427-04:00

2019-06-11T15:03:00.210-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2019-06-04T10:31:02.187-04:00

CISCO 20150311 Multiple Vulnerabilities in Cisco TelePresence Video Communication Server, Cisco Expressway, and Cisco TelePresence Conductor SECTRACK 1031910 The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X7.2.4, X8 before X8.1.2, and X8.2 before X8.2.2 and Cisco TelePresence Conductor before X2.3.1 and XC2.4 before XC2.4.1 allows remote attackers to bypass authentication via crafted login parameters, aka Bug IDs CSCur02680 and CSCur05556.

cpe:/a:cisco:intrusion_prevention_system:7.2%281%29e4 cpe:/a:cisco:intrusion_prevention_system:7.2%282%29e4 cpe:/a:cisco:intrusion_prevention_system:7.3%282%29e4

CVE-2015-0654

2015-03-12T21:59:33.240-04:00

2015-09-11T11:50:15.837-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-11T10:58:06.793-04:00

CISCO 20150311 Cisco Intrusion Prevention System MainApp Secure Socket Layer Denial of Service Vulnerability SECTRACK 1031908 Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652.

cpe:/a:cisco:unified_web_and_e-mail_interaction_manager:-

CVE-2015-0655

2015-02-27T21:59:11.830-05:00

2015-11-02T13:29:41.237-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-02T12:42:20.610-05:00

CISCO 20150227 Cisco Unified Web Interaction Manager Cross-Site Scripting Vulnerability BID 72824 SECTRACK 1031820 Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

cpe:/o:cisco:network_analysis_module_firmware:6.0%282%29

CVE-2015-0656

2015-03-03T21:59:00.053-05:00

2015-11-02T13:29:23.963-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-02T12:41:56.480-05:00

CISCO 20150303 Cisco Network Analysis Module Cross-Site Scripting Vulnerability SECTRACK 1031827 Cross-site scripting (XSS) vulnerability in the login page in Cisco Network Analysis Module (NAM) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269.

cpe:/o:cisco:ios_xr

CVE-2015-0657

2015-03-05T22:00:14.377-05:00

2015-11-02T13:29:11.927-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-11-02T12:42:43.830-05:00

CISCO 20150304 Cisco IOS XR Software Malformed RSVP Packet Denial of Service Vulnerability SECTRACK 1031841 Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192.

cpe:/o:cisco:nx-os:5.0%283%29u3%281%29 cpe:/o:cisco:nx-os:5.0%283%29u3%282%29 cpe:/o:cisco:nx-os:5.0%283%29u3%282a%29 cpe:/o:cisco:nx-os:5.0%283%29u3%282b%29 cpe:/o:cisco:nx-os:5.0%283%29u4%281%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281a%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281b%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281c%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281d%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281e%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281f%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281g%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281h%29 cpe:/o:cisco:nx-os:6.0%282%29n1%281%29 cpe:/o:cisco:nx-os:6.0%282%29n1%282%29 cpe:/o:cisco:nx-os:6.0%282%29n1%282a%29 cpe:/o:cisco:nx-os:6.0%282%29n2%281%29 cpe:/o:cisco:nx-os:6.0%282%29n2%281b%29 cpe:/o:cisco:nx-os:6.0%282%29n2%282%29 cpe:/o:cisco:nx-os:6.0%282%29n2%283%29 cpe:/o:cisco:nx-os:6.0%282%29n2%284%29 cpe:/o:cisco:nx-os:6.0%282%29n2%285%29 cpe:/o:cisco:nx-os:6.0%282%29u1%281%29 cpe:/o:cisco:nx-os:6.0%282%29u1%281a%29 cpe:/o:cisco:nx-os:6.0%282%29u1%282%29 cpe:/o:cisco:nx-os:6.0%282%29u1%283%29 cpe:/o:cisco:nx-os:6.0%282%29u1%284%29 cpe:/o:cisco:nx-os:6.0%282%29u2%281%29 cpe:/o:cisco:nx-os:6.0%282%29u2%282%29 cpe:/o:cisco:nx-os:6.0%282%29u2%283%29 cpe:/o:cisco:nx-os:6.0%282%29u2%284%29 cpe:/o:cisco:nx-os:6.0%282%29u2%285%29 cpe:/o:cisco:nx-os:6.0%282%29u2%286%29 cpe:/o:cisco:nx-os:6.0%282%29u3%281%29 cpe:/o:cisco:nx-os:6.0%282%29u3%282%29 cpe:/o:cisco:nx-os:6.0%282%29u3%283%29 cpe:/o:cisco:nx-os:6.0%282%29u3%284%29 cpe:/o:cisco:nx-os:6.0%282%29u3%285%29 cpe:/o:cisco:nx-os:6.0%282%29u4%281%29 cpe:/o:cisco:nx-os:6.0%282%29u4%282%29 cpe:/o:cisco:nx-os:6.0%282%29u4%283%29 cpe:/o:cisco:nx-os:6.0%282%29u5%281%29 cpe:/o:cisco:nx-os:6.1%282%29 cpe:/o:cisco:nx-os:6.1%282%29i2%281%29 cpe:/o:cisco:nx-os:6.1%282%29i2%282%29 cpe:/o:cisco:nx-os:6.1%282%29i2%282a%29 cpe:/o:cisco:nx-os:6.1%282%29i2%282b%29 cpe:/o:cisco:nx-os:6.1%282%29i2%283%29 cpe:/o:cisco:nx-os:6.1%282%29i3%281%29 cpe:/o:cisco:nx-os:6.1%282%29i3%282%29 cpe:/o:cisco:nx-os:6.1%282%29i3%283%29 cpe:/o:cisco:nx-os:6.1%283%29 cpe:/o:cisco:nx-os:6.1%284%29 cpe:/o:cisco:nx-os:6.1%284a%29 cpe:/o:cisco:nx-os:6.2%282%29 cpe:/o:cisco:nx-os:6.2%282a%29 cpe:/o:cisco:nx-os:6.2%286%29 cpe:/o:cisco:nx-os:6.2%286b%29 cpe:/o:cisco:nx-os:6.2%288%29 cpe:/o:cisco:nx-os:6.2%288a%29 cpe:/o:cisco:nx-os:6.2%288b%29 cpe:/o:cisco:nx-os:7.0%280%29n1%281%29 cpe:/o:cisco:nx-os:7.0%281%29n1%281%29 cpe:/o:cisco:nx-os:7.0%282%29n1%281%29 cpe:/o:cisco:nx-os:7.0%283%29n1%281%29 cpe:/o:cisco:nx-os:11.0%281b%29 cpe:/o:cisco:nx-os:11.0%281c%29

CVE-2015-0658

2015-03-27T21:59:49.210-04:00

2015-10-22T10:37:19.143-04:00

7.9

ADJACENT_NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-10-21T09:16:34.663-04:00

CISCO 20150327 Cisco NX-OS Software DHCP Options Command Injection Vulnerability SECTRACK 1031992 The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589.

cpe:/o:cisco:ios:-

CVE-2015-0659

2015-03-05T22:00:15.237-05:00

2015-11-02T13:28:57.733-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-02T12:42:50.720-05:00

CISCO 20150305 Cisco IOS Autonomic Networking Infrastructure Self-Referential Vulnerability SECTRACK 1031845 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS allows remote attackers to trigger self-referential adjacencies via a crafted Autonomic Networking (AN) message, aka Bug ID CSCup62157.

cpe:/a:cisco:telepresence_server_software

CVE-2015-0660

2015-03-13T21:59:09.033-04:00

2015-10-27T22:17:57.233-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-27T14:54:39.410-04:00

CISCO 20150312 Cisco Virtual TelePresence Server Serial Console Privileged Access SECTRACK 1031924 Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.

cpe:/o:cisco:ios_xr

CVE-2015-0661

2015-03-05T22:00:16.110-05:00

2015-11-02T13:28:12.293-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2015-11-02T12:42:57.533-05:00

CISCO 20150305 Cisco IOS XR Software Malformed SNMP Packet Denial of Service Vulnerability SECTRACK 1031843 The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service (snmpd daemon reload) via a malformed SNMP packet, aka Bug ID CSCur25858.

cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%28.00051%29

CVE-2015-0662

2015-03-16T22:01:47.693-04:00

2015-10-27T22:17:33.963-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-27T14:38:46.757-04:00

CISCO 20150314 Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability SECTRACK 1031933 Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385.

cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%28.00051%29

CVE-2015-0663

2015-03-16T22:01:49.007-04:00

2015-10-27T22:17:01.397-04:00

6.6

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-27T14:35:57.677-04:00

CISCO 20150314 Cisco AnyConnect Secure Mobility Client Arbitrary File Write Vulnerability SECTRACK 1031930 Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%28.00051%29

CVE-2015-0664

2015-03-18T19:59:00.067-04:00

2015-09-10T12:05:39.487-04:00

4.3

LOCAL

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-09-10T09:28:45.170-04:00

CISCO 20150314 Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability SECTRACK 1031932 The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.

cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%28.00051%29

CVE-2015-0665

2015-03-16T22:01:49.867-04:00

2015-10-27T22:16:45.083-04:00

6.6

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-27T14:56:18.237-04:00

CISCO 20150314 Cisco AnyConnect Secure Mobility Client Hostscan Path Traversal Vulnerability SECTRACK 1031931 The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.

cpe:/a:cisco:prime_data_center_network_manager:6.3%281%29 cpe:/a:cisco:prime_data_center_network_manager:6.3%282%29 cpe:/a:cisco:prime_data_center_network_manager:7.0%281%29 cpe:/a:cisco:prime_data_center_network_manager:7.0%282%29

CVE-2015-0666

2015-04-03T06:59:04.290-04:00

2015-09-29T15:31:23.037-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

NONE

http://nvd.nist.gov

2015-09-29T14:10:08.940-04:00

CISCO 20150401 Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability SECTRACK 1032009 Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

cpe:/o:cisco:content_services_switch_11500_firmware:8.20.4.02

CVE-2015-0667

2015-03-18T19:59:01.330-04:00

2015-09-10T12:06:04.767-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-10T09:13:17.057-04:00

CISCO 20150318 Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability SECTRACK 1031939 The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855.

cpe:/a:cisco:webex_meetings_server:2.5 cpe:/a:cisco:webex_meetings_server:2.5.99.2

CVE-2015-0668

2015-03-19T21:59:00.063-04:00

2015-10-01T13:15:16.600-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-01T12:08:21.197-04:00

CISCO 20150319 Cisco WebEx Meetings Server Administrative Portal Cross-Site Scripting Vulnerability SECTRACK 1031968 Cross-site scripting (XSS) vulnerability in the administration portal in Cisco WebEx Meetings Server 2.5 and 2.5.99.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq66737.

cpe:/o:cisco:ios:15.4%283%29s cpe:/o:cisco:ios:15.4s

CVE-2015-0669

2015-03-20T21:59:00.090-04:00

2015-10-01T13:15:35.457-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-10-01T12:07:57.493-04:00

CISCO 20150319 Cisco IOS Software Autonomic Networking Infrastructure Overwrite Vulnerability SECTRACK 1031967 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings or cause a denial of service (partial service outage) by sending crafted Autonomic Networking (AN) messages on an intranet network, aka Bug ID CSCup62167.

cpe:/h:cisco:spa_301_1_line_ip_phone cpe:/h:cisco:spa_302d cpe:/h:cisco:spa_302dkit cpe:/h:cisco:spa_303_3_line_ip_phone cpe:/h:cisco:spa_501g_8-line_ip_phone cpe:/h:cisco:spa_502g_1-line_ip_phone cpe:/h:cisco:spa_504g_4-line_ip_phone cpe:/h:cisco:spa_508g_8-line_ip_phone cpe:/h:cisco:spa_509g_12-line_ip_phone cpe:/h:cisco:spa_512g_1-line_ip_phone cpe:/h:cisco:spa_514g_4-line_ip_phone cpe:/h:cisco:spa_525g2_5-line_ip_phone cpe:/h:cisco:spa_525g_5-line_ip_phone cpe:/o:cisco:spa300_firmware:7.5.5 cpe:/o:cisco:spa500_firmware:7.5.5

CVE-2015-0670

2015-03-20T21:59:01.560-04:00

2015-10-22T10:40:06.637-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-10-21T10:12:27.747-04:00

CISCO 20150319 Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial Vulnerability SECTRACK 1031969 The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482.

cpe:/a:cisco:videoscape_delivery_system_for_internet_streamer:3.2.1

CVE-2015-0671

2015-03-19T21:59:01.687-04:00

2015-03-20T10:46:31.087-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-03-20T09:35:14.220-04:00

CISCO 20150319 Cisco Videoscape Distribution Suite for Internet Streaming Denial of Service Vulnerability The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of service (CPU consumption and network-resource consumption) via crafted packets, aka Bug ID CSCun15911.

cpe:/o:cisco:ios_xr:5.2.2

CVE-2015-0672

2015-03-26T06:59:15.740-04:00

2015-09-04T14:58:02.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-09-04T14:34:30.277-04:00

CISCO 20150324 Cisco IOS XR Software DHCPv4 Server Denial of Service Vulnerability SECTRACK 1031970 The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of crafted DHCP packets, aka Bug ID CSCup67822.

cpe:/h:cisco:mobility_services_engine:8.0%28110.0%29

CVE-2015-0673

2015-03-26T06:59:16.503-04:00

2015-09-04T14:58:56.387-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-04T14:33:12.377-04:00

CISCO 20150324 Cisco Mobility Service Engine Password Information Disclosure Vulnerability SECTRACK 1031971 Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using an unspecified GUI feature, aka Bug ID CSCut24792.

cpe:/a:cisco:cloud_web_security:-

CVE-2015-0674

2017-07-25T14:29:00.180-04:00

2017-07-31T13:54:44.030-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-07-27T14:43:54.577-04:00

CISCO 20150326 Cisco Web Security Alert Service Cross-Site Scripting Vulnerability Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

cpe:/o:cisco:adaptive_security_appliance_software:9.1.1 cpe:/o:cisco:adaptive_security_appliance_software:9.1.1.4 cpe:/o:cisco:adaptive_security_appliance_software:9.1.2 cpe:/o:cisco:adaptive_security_appliance_software:9.1.2.8 cpe:/o:cisco:adaptive_security_appliance_software:9.1.3 cpe:/o:cisco:adaptive_security_appliance_software:9.1.3.2 cpe:/o:cisco:adaptive_security_appliance_software:9.1.4 cpe:/o:cisco:adaptive_security_appliance_software:9.1.4.5 cpe:/o:cisco:adaptive_security_appliance_software:9.1.5 cpe:/o:cisco:adaptive_security_appliance_software:9.1.5.10 cpe:/o:cisco:adaptive_security_appliance_software:9.1.5.12 cpe:/o:cisco:adaptive_security_appliance_software:9.1.5.15 cpe:/o:cisco:adaptive_security_appliance_software:9.1.5.21 cpe:/o:cisco:adaptive_security_appliance_software:9.2.1 cpe:/o:cisco:adaptive_security_appliance_software:9.2.2 cpe:/o:cisco:adaptive_security_appliance_software:9.2.2.4 cpe:/o:cisco:adaptive_security_appliance_software:9.2.2.7 cpe:/o:cisco:adaptive_security_appliance_software:9.2.2.8 cpe:/o:cisco:adaptive_security_appliance_software:9.2.3 cpe:/o:cisco:adaptive_security_appliance_software:9.3.1 cpe:/o:cisco:adaptive_security_appliance_software:9.3.1.1 cpe:/o:cisco:adaptive_security_appliance_software:9.3.2 cpe:/o:cisco:adaptive_security_appliance_software:9.3.2.2

CVE-2015-0675

2015-04-12T21:59:00.063-04:00

2015-10-01T13:16:06.753-04:00

8.3

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-01T11:58:01.477-04:00

CISCO 20150408 Multiple Vulnerabilities in Cisco ASA Software SECTRACK 1032045 The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrative control, by sending crafted UDP packets over the local network to the failover interface, aka Bug ID CSCur21069.

cpe:/a:cisco:adaptive_security_appliance_software:7.0.1 cpe:/a:cisco:adaptive_security_appliance_software:7.0.1.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.3 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.5 cpe:/a:cisco:adaptive_security_appliance_software:7.0.5.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.18 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.22 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.26 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.29 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.32 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.1 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.9 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.13 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.16 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.20 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.24 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.28 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.38 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.42 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.46 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.49 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.53 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.61 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.64 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.72 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.81 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.9 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.13 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.19 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.24 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.6 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.10 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.14 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.18 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.19 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.22 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.34 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3.1 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3.12 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3.16 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.6 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.9 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.18 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.25 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.27 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.30 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.33 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.2 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.4 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.7 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.8 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.10 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.12 cpe:/a:cisco:adaptive_security_appliance_software:8.0.1.2 cpe:/a:cisco:adaptive_security_appliance_software:8.0.2 cpe:/a:cisco:adaptive_security_appliance_software:8.0.2.11 cpe:/a:cisco:adaptive_security_appliance_software:8.0.2.15 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3.6 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3.12 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3.19 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.3 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.9 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.16 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.23 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.25 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.28 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.31 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.32 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.33 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.20 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.23 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.25 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.27 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.28 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.31 cpe:/a:cisco:adaptive_security_appliance_software:8.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.1.1.6 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.13 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.15 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.16 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.19 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.23 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.24 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.49 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.50 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.55 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.56 cpe:/a:cisco:adaptive_security_appliance_software:8.2.0.45 cpe:/a:cisco:adaptive_security_appliance_software:8.2.1 cpe:/a:cisco:adaptive_security_appliance_software:8.2.1.11 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.9 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.10 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.12 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.16 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.17 cpe:/a:cisco:adaptive_security_appliance_software:8.2.3 cpe:/a:cisco:adaptive_security_appliance_software:8.2.4 cpe:/a:cisco:adaptive_security_appliance_software:8.2.4.1 cpe:/a:cisco:adaptive_security_appliance_software:8.2.4.4 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.13 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.22 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.26 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.33 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.40 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.41 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.46 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.48 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.50 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.52 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.55 cpe:/a:cisco:adaptive_security_appliance_software:8.2.5.57 cpe:/a:cisco:adaptive_security_appliance_software:8.3.1 cpe:/a:cisco:adaptive_security_appliance_software:8.3.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.3.1.4 cpe:/a:cisco:adaptive_security_appliance_software:8.3.1.6 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.4 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.13 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.23 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.25 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.31 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.33 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.34 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.37 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.39 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.40 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.41 cpe:/a:cisco:adaptive_security_appliance_software:8.3.2.44 cpe:/a:cisco:adaptive_security_appliance_software:8.4.1 cpe:/a:cisco:adaptive_security_appliance_software:8.4.1.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.1.11 cpe:/a:cisco:adaptive_security_appliance_software:8.4.2 cpe:/a:cisco:adaptive_security_appliance_software:8.4.2.1 cpe:/a:cisco:adaptive_security_appliance_software:8.4.2.8 cpe:/a:cisco:adaptive_security_appliance_software:8.4.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.3.8 cpe:/a:cisco:adaptive_security_appliance_software:8.4.3.9 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.1 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.5 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.9 cpe:/a:cisco:adaptive_security_appliance_software:8.4.5 cpe:/a:cisco:adaptive_security_appliance_software:8.4.5.6 cpe:/a:cisco:adaptive_security_appliance_software:8.4.6 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.15 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.22 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.23 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.26 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.6 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.7 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.14 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.17 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.18 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.19 cpe:/a:cisco:adaptive_security_appliance_software:8.5.1.21 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.2 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.5 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.10 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.12 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.13 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.14 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.3 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.4 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.7 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.8 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.11 cpe:/a:cisco:adaptive_security_appliance_software:8.7.1.13 cpe:/a:cisco:adaptive_security_appliance_software:9.0.1 cpe:/a:cisco:adaptive_security_appliance_software:9.0.2 cpe:/a:cisco:adaptive_security_appliance_software:9.0.2.10 cpe:/a:cisco:adaptive_security_appliance_software:9.0.3 cpe:/a:cisco:adaptive_security_appliance_software:9.0.3.6 cpe:/a:cisco:adaptive_security_appliance_software:9.0.3.8 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.1 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.5 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.7 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.17 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.20 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.24 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.26 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.29 cpe:/a:cisco:adaptive_security_appliance_software:9.1.1 cpe:/a:cisco:adaptive_security_appliance_software:9.1.1.4 cpe:/a:cisco:adaptive_security_appliance_software:9.1.2 cpe:/a:cisco:adaptive_security_appliance_software:9.1.2.8 cpe:/a:cisco:adaptive_security_appliance_software:9.1.3 cpe:/a:cisco:adaptive_security_appliance_software:9.1.3.2 cpe:/a:cisco:adaptive_security_appliance_software:9.1.4 cpe:/a:cisco:adaptive_security_appliance_software:9.1.4.5 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.10 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.12 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.15 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.21 cpe:/a:cisco:adaptive_security_appliance_software:9.1.6 cpe:/a:cisco:adaptive_security_appliance_software:9.2.1 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2.4 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2.7 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2.8 cpe:/a:cisco:adaptive_security_appliance_software:9.2.3 cpe:/a:cisco:adaptive_security_appliance_software:9.2.3.3 cpe:/a:cisco:adaptive_security_appliance_software:9.3.1 cpe:/a:cisco:adaptive_security_appliance_software:9.3.1.1 cpe:/a:cisco:adaptive_security_appliance_software:9.3.2 cpe:/a:cisco:adaptive_security_appliance_software:9.3.2.2

CVE-2015-0676

2015-04-12T21:59:01.953-04:00

2015-04-23T00:49:32.063-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-04-22T12:38:44.020-04:00

CISCO 20150408 Multiple Vulnerabilities in Cisco ASA Software SECTRACK 1032045 The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24), 8.6 before 8.6(1.17), 8.7 before 8.7(1.16), 9.0 before 9.0(4.33), 9.1 before 9.1(6.1), 9.2 before 9.2(3.4), and 9.3 before 9.3(3) allows man-in-the-middle attackers to cause a denial of service (memory consumption or device outage) by triggering outbound DNS queries and then sending crafted responses to these queries, aka Bug ID CSCuq77655.

cpe:/a:cisco:adaptive_security_appliance_software:8.4.1 cpe:/a:cisco:adaptive_security_appliance_software:8.4.1.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.1.11 cpe:/a:cisco:adaptive_security_appliance_software:8.4.2 cpe:/a:cisco:adaptive_security_appliance_software:8.4.2.1 cpe:/a:cisco:adaptive_security_appliance_software:8.4.2.8 cpe:/a:cisco:adaptive_security_appliance_software:8.4.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.3.8 cpe:/a:cisco:adaptive_security_appliance_software:8.4.3.9 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.1 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.5 cpe:/a:cisco:adaptive_security_appliance_software:8.4.4.9 cpe:/a:cisco:adaptive_security_appliance_software:8.4.5 cpe:/a:cisco:adaptive_security_appliance_software:8.4.5.6 cpe:/a:cisco:adaptive_security_appliance_software:8.4.6 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.3 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.15 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.22 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.23 cpe:/a:cisco:adaptive_security_appliance_software:8.4.7.26 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.2 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.5 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.10 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.12 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.13 cpe:/a:cisco:adaptive_security_appliance_software:8.6.1.14 cpe:/a:cisco:adaptive_security_appliance_software:9.0.1 cpe:/a:cisco:adaptive_security_appliance_software:9.0.2 cpe:/a:cisco:adaptive_security_appliance_software:9.0.2.10 cpe:/a:cisco:adaptive_security_appliance_software:9.0.3 cpe:/a:cisco:adaptive_security_appliance_software:9.0.3.6 cpe:/a:cisco:adaptive_security_appliance_software:9.0.3.8 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.1 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.5 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.7 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.17 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.20 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.24 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.26 cpe:/a:cisco:adaptive_security_appliance_software:9.0.4.29 cpe:/a:cisco:adaptive_security_appliance_software:9.1.1 cpe:/a:cisco:adaptive_security_appliance_software:9.1.1.4 cpe:/a:cisco:adaptive_security_appliance_software:9.1.2 cpe:/a:cisco:adaptive_security_appliance_software:9.1.2.8 cpe:/a:cisco:adaptive_security_appliance_software:9.1.3 cpe:/a:cisco:adaptive_security_appliance_software:9.1.3.2 cpe:/a:cisco:adaptive_security_appliance_software:9.1.4 cpe:/a:cisco:adaptive_security_appliance_software:9.1.4.5 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.10 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.12 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.15 cpe:/a:cisco:adaptive_security_appliance_software:9.1.5.21 cpe:/a:cisco:adaptive_security_appliance_software:9.2.1 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2.4 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2.7 cpe:/a:cisco:adaptive_security_appliance_software:9.2.2.8 cpe:/a:cisco:adaptive_security_appliance_software:9.2.3 cpe:/a:cisco:adaptive_security_appliance_software:9.2.3.3 cpe:/a:cisco:adaptive_security_appliance_software:9.3.1 cpe:/a:cisco:adaptive_security_appliance_software:9.3.1.1 cpe:/a:cisco:adaptive_security_appliance_software:9.3.2 cpe:/a:cisco:adaptive_security_appliance_software:9.3.2.2

CVE-2015-0677

2015-04-12T21:59:03.033-04:00

2015-04-23T00:50:18.627-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-04-22T12:26:23.380-04:00

CISCO 20150408 Multiple Vulnerabilities in Cisco ASA Software SECTRACK 1032045 The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4), and 9.3 before 9.3(3), when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a denial of service (VPN outage or device reload) via a crafted XML document, aka Bug ID CSCus95290.

cpe:/o:cisco:asa_cx_context-aware_security_software:9.0.1 cpe:/o:cisco:asa_cx_context-aware_security_software:9.0.1-40 cpe:/o:cisco:asa_cx_context-aware_security_software:9.0.2 cpe:/o:cisco:asa_cx_context-aware_security_software:9.0.2-68 cpe:/o:cisco:asa_cx_context-aware_security_software:9.0_base cpe:/o:cisco:asa_cx_context-aware_security_software:9.1.2-29 cpe:/o:cisco:asa_cx_context-aware_security_software:9.1.2-42 cpe:/o:cisco:asa_cx_context-aware_security_software:9.1.3-8 cpe:/o:cisco:asa_cx_context-aware_security_software:9.1.3-10 cpe:/o:cisco:asa_cx_context-aware_security_software:9.1.3-13 cpe:/o:cisco:asa_cx_context-aware_security_software:9.2.1-1 cpe:/o:cisco:asa_cx_context-aware_security_software:9.2.1-2 cpe:/o:cisco:asa_cx_context-aware_security_software:9.2.1-3 cpe:/o:cisco:asa_cx_context-aware_security_software:9.2.1-4 cpe:/o:cisco:asa_cx_context-aware_security_software:9.3%281.1.112%29 cpe:/o:cisco:asa_cx_context-aware_security_software:9.3.1-1 cpe:/o:cisco:asa_cx_context-aware_security_software:9.3.2-1 cpe:/o:cisco:asa_cx_context-aware_security_software:9.3_base cpe:/o:cisco:asa_with_firepower_services:5.3.1 cpe:/o:cisco:asa_with_firepower_services:5.3.1.1 cpe:/o:cisco:asa_with_firepower_services:5.4.0

CVE-2015-0678

2015-04-10T21:59:00.087-04:00

2015-10-01T13:16:20.283-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-01T11:57:56.243-04:00

CISCO 20150408 Cisco ASA FirePOWER Services and Cisco ASA CX Services Crafted Packets Denial of Service Vulnerability SECTRACK 1032046 The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to cause a denial of service (device reload) by rapidly sending crafted packets to the management interface, aka Bug IDs CSCus11007 and CSCun56954.

cpe:/a:cisco:wireless_lan_controller:7.3%28103.8%29 cpe:/a:cisco:wireless_lan_controller:7.4%28110.0%29

CVE-2015-0679

2015-03-27T21:59:53.083-04:00

2015-10-01T13:16:42.970-04:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-10-01T12:07:52.853-04:00

CISCO 20150326 Cisco Wireless LAN Controller Task Name aaaQueueReader Denial of Service Vulnerability SECTRACK 1031990 The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a denial of service (device reload) via a malformed password, aka Bug ID CSCui57980.

cpe:/a:cisco:unified_callmanager:9.1%282.1000.28%29

CVE-2015-0680

2015-03-27T21:59:53.833-04:00

2015-11-30T14:48:02.270-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-11-30T12:50:59.967-05:00

CISCO 20150327 Cisco Unified Call Manager Arbitrary File Retrieval Vulnerability SECTRACK 1031991 Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource requests, which allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuq44439.

cpe:/o:cisco:ios:12.2%2833%29xn1 cpe:/o:cisco:ios:12.2%2844%29sq1 cpe:/o:cisco:ios:12.4%2823%29jy cpe:/o:cisco:ios:12.4%2825e%29jam1 cpe:/o:cisco:ios:12.4%2825e%29jao5m cpe:/o:cisco:ios:15.0%282%29ed1 cpe:/o:cisco:ios:15.0%282%29ey3 cpe:/o:cisco:ios:15.1%283%29svf4a cpe:/o:cisco:ios:15.2%282%29jb1 cpe:/o:cisco:ios_xe:2.5.0 cpe:/o:cisco:ios_xe:2.5.1 cpe:/o:cisco:ios_xe:2.5.2 cpe:/o:cisco:ios_xe:2.6.0 cpe:/o:cisco:ios_xe:2.6.1 cpe:/o:cisco:ios_xe:2.6.2 cpe:/o:cisco:ios_xe:3.1s.0 cpe:/o:cisco:ios_xe:3.1s.1 cpe:/o:cisco:ios_xe:3.1s.2 cpe:/o:cisco:ios_xe:3.1s.3 cpe:/o:cisco:ios_xe:3.1s.4 cpe:/o:cisco:ios_xe:3.1s.5 cpe:/o:cisco:ios_xe:3.1s.6 cpe:/o:cisco:ios_xe:3.1sg.0 cpe:/o:cisco:ios_xe:3.1sg.1 cpe:/o:cisco:ios_xe:3.2s.0 cpe:/o:cisco:ios_xe:3.2s.1 cpe:/o:cisco:ios_xe:3.2s.2 cpe:/o:cisco:ios_xe:3.2s.3 cpe:/o:cisco:ios_xe:3.2se.0 cpe:/o:cisco:ios_xe:3.2se.1 cpe:/o:cisco:ios_xe:3.2se.2 cpe:/o:cisco:ios_xe:3.2se.3 cpe:/o:cisco:ios_xe:3.2sg.0 cpe:/o:cisco:ios_xe:3.2sg.1 cpe:/o:cisco:ios_xe:3.2sg.2 cpe:/o:cisco:ios_xe:3.2sg.3 cpe:/o:cisco:ios_xe:3.2sg.4 cpe:/o:cisco:ios_xe:3.2sg.5 cpe:/o:cisco:ios_xe:3.2sg.6 cpe:/o:cisco:ios_xe:3.2sg.7 cpe:/o:cisco:ios_xe:3.2sg.8 cpe:/o:cisco:ios_xe:3.2sg.9 cpe:/o:cisco:ios_xe:3.2xo.0 cpe:/o:cisco:ios_xe:3.2xo.1 cpe:/o:cisco:ios_xe:3.3sg.0 cpe:/o:cisco:ios_xe:3.3sg.1 cpe:/o:cisco:ios_xe:3.3sg.2 cpe:/o:cisco:ios_xe:3.3sq.0 cpe:/o:cisco:ios_xe:3.3sq.1 cpe:/o:cisco:ios_xe:3.4s.0 cpe:/o:cisco:ios_xe:3.4s.1 cpe:/o:cisco:ios_xe:3.4s.2 cpe:/o:cisco:ios_xe:3.4s.3 cpe:/o:cisco:ios_xe:3.4s.4 cpe:/o:cisco:ios_xe:3.4s.5 cpe:/o:cisco:ios_xe:3.4s.6 cpe:/o:cisco:ios_xe:3.4sq.0 cpe:/o:cisco:ios_xe:3.4sq.1 cpe:/o:cisco:ios_xe:3.5s.0 cpe:/o:cisco:ios_xe:3.5s.1 cpe:/o:cisco:ios_xe:3.5s.2 cpe:/o:cisco:ios_xe:3.5s_base

CVE-2015-0681

2015-07-24T12:59:00.067-04:00

2017-09-20T21:29:01.070-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150722 Cisco IOS Software TFTP Server Denial of Service Vulnerability CONFIRM http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp/cvrf/cisco-sa-20150722-tftp_cvrf.xml SECTRACK 1033023 The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733.

cpe:/a:cisco:unified_communications_domain_manager:8.1%28.4%29

CVE-2015-0682

2015-04-03T06:59:06.337-04:00

2015-10-27T22:16:33.223-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-10-27T14:32:13.127-04:00

CISCO 20150331 Cisco Unified Communications Domain Manager Application Software Remote Code Execution Vulnerability SECTRACK 1032002 Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168.

cpe:/a:cisco:unified_communications_domain_manager:8.1%28.4%29

CVE-2015-0683

2015-04-03T06:59:07.227-04:00

2015-09-29T15:31:06.410-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-29T14:10:14.520-04:00

CISCO 20150331 Cisco Unified Communications Domain Manager Application Software Information Disclosure Vulnerability SECTRACK 1032003 Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744.

cpe:/a:cisco:unified_communications_domain_manager:8.1%28.4%29

CVE-2015-0684

2015-04-03T06:59:07.960-04:00

2015-09-29T15:30:54.957-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-09-29T14:10:18.050-04:00

CISCO 20150331 Cisco Unified Communications Domain Manager Application Software SQL Injection Vulnerability SECTRACK 1032001 SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq52515.

cpe:/o:cisco:ios_xe:3.7s.4

CVE-2015-0685

2015-04-02T22:00:24.317-04:00

2015-09-29T15:30:42.867-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:05:48.637-04:00

CISCO 20150331 Cisco ASR1000 Series Routers Incomplete or Glean Adjacencies Denial of Service Vulnerability SECTRACK 1032004 Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873.

cpe:/o:cisco:nx-os:6.1%282%29i2%283%29

CVE-2015-0686

2015-04-02T22:00:25.097-04:00

2015-09-29T15:29:20.383-04:00

6.3

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:05:54.763-04:00

CISCO 20150402 Cisco Nexus 9000 Series Denial of Service Vulnerability SECTRACK 1032021 The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to cause a denial of service (device reload) via unspecified vectors, aka Bug ID CSCuq92240.

cpe:/o:cisco:ios:15.1%282%29sg4 cpe:/o:cisco:ios:15.1sg

CVE-2015-0687

2015-04-02T22:00:25.910-04:00

2015-09-29T15:28:03.370-04:00

6.3

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:06:41.713-04:00

CISCO 20150402 Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability SECTRACK 1032022 The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows remote authenticated users to cause a denial of service (device crash) by performing SNMP polling, aka Bug ID CSCuq04574.

cpe:/o:cisco:ios_xe:13.10.2s

CVE-2015-0688

2015-04-03T21:59:02.593-04:00

2015-09-29T15:27:50.590-04:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2015-09-29T14:06:47.603-04:00

CISCO 20150403 Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability SECTRACK 1032023 Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.

cpe:/a:cisco:cloud_web_security:3.0.1.2

CVE-2015-0689

2017-09-19T11:29:00.523-04:00

2017-09-22T19:42:01.867-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-09-22T13:29:27.633-04:00

CISCO 20150406 Cisco Cloud Web Security Filtering Bypass Vulnerability Cisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering protection mechanisms by leveraging improper handling of HTTP methods, aka Bug ID CSCut69743.

cpe:/o:cisco:wireless_lan_controller_software:7.4.121.0 cpe:/o:cisco:wireless_lan_controller_software:7.6.100.0 cpe:/o:cisco:wireless_lan_controller_software:8.0.72.140

CVE-2015-0690

2015-04-06T22:00:21.297-04:00

2015-09-29T15:27:40.637-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-29T14:06:54.247-04:00

CISCO 20150406 Cisco Wireless LAN Controller HTML Help Cross-Site Scripting Vulnerability SECTRACK 1032024 Cross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller (WLC) devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178.

cpe:/a:cisco:secure_desktop:3.0_base cpe:/a:cisco:secure_desktop:3.1.0.31 cpe:/a:cisco:secure_desktop:3.1.1 cpe:/a:cisco:secure_desktop:3.1.1.45 cpe:/a:cisco:secure_desktop:3.1_base cpe:/a:cisco:secure_desktop:3.2.0.136 cpe:/a:cisco:secure_desktop:3.2.1.103 cpe:/a:cisco:secure_desktop:3.2.1.126 cpe:/a:cisco:secure_desktop:3.2_base cpe:/a:cisco:secure_desktop:3.3.0.118 cpe:/a:cisco:secure_desktop:3.3.0.151 cpe:/a:cisco:secure_desktop:3.3_base cpe:/a:cisco:secure_desktop:3.4.0373 cpe:/a:cisco:secure_desktop:3.4.1108 cpe:/a:cisco:secure_desktop:3.4.2048 cpe:/a:cisco:secure_desktop:3.4_base cpe:/a:cisco:secure_desktop:3.5.841 cpe:/a:cisco:secure_desktop:3.5.1077 cpe:/a:cisco:secure_desktop:3.5.2001 cpe:/a:cisco:secure_desktop:3.5.2003 cpe:/a:cisco:secure_desktop:3.5.2008 cpe:/a:cisco:secure_desktop:3.5_base cpe:/a:cisco:secure_desktop:3.6.181 cpe:/a:cisco:secure_desktop:3.6.185 cpe:/a:cisco:secure_desktop:3.6.1001 cpe:/a:cisco:secure_desktop:3.6.2002 cpe:/a:cisco:secure_desktop:3.6.3002 cpe:/a:cisco:secure_desktop:3.6.4021 cpe:/a:cisco:secure_desktop:3.6.5005 cpe:/a:cisco:secure_desktop:3.6.6020 cpe:/a:cisco:secure_desktop:3.6.6104 cpe:/a:cisco:secure_desktop:3.6.6203 cpe:/a:cisco:secure_desktop:3.6.6210 cpe:/a:cisco:secure_desktop:3.6.6228 cpe:/a:cisco:secure_desktop:3.6.6234 cpe:/a:cisco:secure_desktop:3.6.6249 cpe:/a:cisco:secure_desktop:3.6_base

CVE-2015-0691

2015-04-16T21:59:25.420-04:00

2017-01-06T11:05:14.267-05:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T10:47:01.450-05:00

CISCO 20150415 Cisco Secure Desktop Cache Cleaner Command Execution Vulnerability SECTRACK 1032140 A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001.

cpe:/a:cisco:web_security_appliance:8.5_base

CVE-2015-0692

2015-04-10T21:59:02.633-04:00

2017-01-06T12:20:39.437-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T11:20:53.550-05:00

CISCO 20150410 Cisco Web Security Appliance Pickle Python Module Arbitrary Code Execution Vulnerability SECTRACK 1032097 Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230.

cpe:/a:cisco:web_security_appliance:8.5_base

CVE-2015-0693

2015-04-15T06:59:01.393-04:00

2017-01-06T12:12:58.957-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T11:36:30.287-05:00

CISCO 20150413 Cisco Web Security Appliance Python File Processing Privilege Escalation Vulnerability SECTRACK 1032097 Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via a crafted pickle file, aka Bug ID CSCut39259.

cpe:/h:cisco:asr_9001:- cpe:/h:cisco:asr_9006:- cpe:/h:cisco:asr_9010:- cpe:/h:cisco:asr_9904:- cpe:/h:cisco:asr_9912:- cpe:/h:cisco:asr_9922:- cpe:/o:cisco:ios_xr:5.3.0_base

CVE-2015-0694

2015-04-10T21:59:03.803-04:00

2015-09-29T15:27:29.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-29T14:00:31.287-04:00

CISCO 20150409 Cisco Aggregate Services Router 9000 ASR9K Security Bypass Vulnerability SECTRACK 1032059 Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.

cpe:/o:cisco:ios_xr:4.3.0 cpe:/o:cisco:ios_xr:4.3.1 cpe:/o:cisco:ios_xr:4.3.2 cpe:/o:cisco:ios_xr:4.3.3 cpe:/o:cisco:ios_xr:5.1.0 cpe:/o:cisco:ios_xr:5.1.1 cpe:/o:cisco:ios_xr:5.1.2 cpe:/o:cisco:ios_xr:5.2.0 cpe:/o:cisco:ios_xr:5.2.1

CVE-2015-0695

2015-04-16T21:59:26.263-04:00

2017-01-06T10:29:26.277-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T10:13:00.050-05:00

CISCO 20150415 Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability BID 74162 SECTRACK 1032139 Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.

cpe:/a:cisco:telepresence_tc_software:6.0.0 cpe:/a:cisco:telepresence_tc_software:6.0.0-cucm cpe:/a:cisco:telepresence_tc_software:6.0.1 cpe:/a:cisco:telepresence_tc_software:6.0.1-cucm cpe:/a:cisco:telepresence_tc_software:6.0.2 cpe:/a:cisco:telepresence_tc_software:6.0_base cpe:/a:cisco:telepresence_tc_software:6.1.0 cpe:/a:cisco:telepresence_tc_software:6.1.0-cucm cpe:/a:cisco:telepresence_tc_software:6.1.1 cpe:/a:cisco:telepresence_tc_software:6.1.1-cucm cpe:/a:cisco:telepresence_tc_software:6.1.2 cpe:/a:cisco:telepresence_tc_software:6.1.2-cucm cpe:/a:cisco:telepresence_tc_software:6.1_base cpe:/a:cisco:telepresence_tc_software:6.3_base

CVE-2015-0696

2015-04-15T06:59:02.423-04:00

2017-01-06T12:09:37.897-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:20:06.827-05:00

CISCO 20150414 Cisco TelePresence Collaboration Desk and Room Endpoints Cross-Site Scripting Vulnerability SECTRACK 1032137 Cross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuq94977.

cpe:/o:cisco:telepresence_tc_software:6.0.0 cpe:/o:cisco:telepresence_tc_software:6.0.0-cucm cpe:/o:cisco:telepresence_tc_software:6.0.1 cpe:/o:cisco:telepresence_tc_software:6.0.1-cucm cpe:/o:cisco:telepresence_tc_software:6.0.2 cpe:/o:cisco:telepresence_tc_software:6.0_base cpe:/o:cisco:telepresence_tc_software:6.1.0 cpe:/o:cisco:telepresence_tc_software:6.1.0-cucm cpe:/o:cisco:telepresence_tc_software:6.1.1 cpe:/o:cisco:telepresence_tc_software:6.1.1-cucm cpe:/o:cisco:telepresence_tc_software:6.1.2 cpe:/o:cisco:telepresence_tc_software:6.1.2-cucm cpe:/o:cisco:telepresence_tc_software:6.1_base cpe:/o:cisco:telepresence_tc_software:6.3_base cpe:/o:cisco:telepresence_tc_software:7.2_base

CVE-2015-0697

2015-04-15T06:59:03.533-04:00

2017-01-06T11:32:24.160-05:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:05:42.880-05:00

CISCO 20150414 Cisco TelePresence Collaboration Desk and Room Endpoints HTML Redirect Vulnerability SECTRACK 1032136 Open redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7.3.0 on Cisco TelePresence Collaboration Desk and Room Endpoints devices allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuq94980.

cpe:/a:cisco:web_security_appliance:8.5.0-497

CVE-2015-0698

2015-04-15T06:59:04.580-04:00

2017-01-06T12:09:40.850-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:24:27.097-05:00

CISCO 20150414 Cisco Web Security Appliance Cross-Site Scripting Vulnerability SECTRACK 1032135 Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213.

cpe:/a:cisco:unified_communications_domain_manager:10.5%281.98991.13%29

CVE-2015-0699

2015-04-15T06:59:05.440-04:00

2017-01-06T11:31:52.810-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:01:43.287-05:00

CISCO 20150414 Cisco Unified Communications Manager Interactive Voice Response Interface SQL Injection Vulnerability SECTRACK 1032134 SQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified Communications Manager (UCM) 10.5(1.98991.13) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut21563.

cpe:/a:cisco:secure_access_control_server_solution_engine:5.4.0.46.6 cpe:/a:cisco:secure_access_control_server_solution_engine:5.5.0.36 cpe:/a:cisco:secure_access_control_server_solution_engine:5.5.0.46.4

CVE-2015-0700

2015-04-16T21:59:27.030-04:00

2017-01-06T11:06:04.167-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T10:43:10.527-05:00

CISCO 20150416 Cisco Secure Access Control Server Dashboard Page Cross-Site Request Forgery Vulnerability SECTRACK 1032163 Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924.

cpe:/a:cisco:unified_computing_system_central_software:1.0_base cpe:/a:cisco:unified_computing_system_central_software:1.1_base cpe:/a:cisco:unified_computing_system_central_software:1.2%281a%29 cpe:/a:cisco:unified_computing_system_central_software:1.2%281d%29 cpe:/a:cisco:unified_computing_system_central_software:1.2%281e%29 cpe:/a:cisco:unified_computing_system_central_software:1.2%281f%29

CVE-2015-0701

2015-05-06T21:59:02.323-04:00

2016-11-28T14:17:01.440-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150506 Cisco UCS Central Software Arbitrary Command Execution Vulnerability BID 74491 SECTRACK 1032267 Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.

cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0702

2015-04-20T22:59:00.997-04:00

2017-01-06T10:29:36.823-05:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2017-01-06T10:13:43.853-05:00

CISCO 20150420 Cisco Unified MeetingPlace Custom Prompts languageShortName Parameter Arbitrary Code Execution Vulnerability SECTRACK 1032165 Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712.

cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0703

2015-04-20T22:59:03.887-04:00

2017-01-06T10:52:16.740-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T10:39:06.417-05:00

CISCO 20150420 Cisco Unified MeetingPlace Administrative Web Interface Reflected Cross-Site Scripting Vulnerability SECTRACK 1032164 Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus95857.

cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0704

2015-04-21T21:59:00.083-04:00

2017-01-06T11:29:04.350-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T11:02:53.453-05:00

CISCO 20150421 Cisco Unified MeetingPlace Server Multiple State Changing URL API Functionalities Cross-Site Request Forgery Vulnerability SECTRACK 1032334 Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884.

cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0705

2015-04-21T21:59:01.413-04:00

2017-01-06T10:30:25.660-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T10:06:43.000-05:00

CISCO 20150421 Cisco Unified MeetingPlace Web Services Directory SOAP API Endpoints Cross-Site Request Forgery Vulnerability BID 74258 SECTRACK 1032335 CONFIRM https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494.

cpe:/a:cisco:firesight_system_software:5.3.1.1 cpe:/a:cisco:firesight_system_software:5.3.1.2 cpe:/a:cisco:firesight_system_software:6.0.0

CVE-2015-0706

2015-04-22T22:00:16.257-04:00

2015-04-23T12:49:02.237-04:00

5.8

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-04-23T12:26:22.493-04:00

CISCO 20150422 Cisco FireSIGHT Management Center Web Framework HTTP Header Redirection Vulnerability Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966.

cpe:/a:cisco:firesight_system_software:5.3.1.1 cpe:/a:cisco:firesight_system_software:6.0.0

CVE-2015-0707

2015-04-22T22:00:17.193-04:00

2015-04-23T12:48:19.207-04:00

3.5

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-04-23T12:27:12.237-04:00

CISCO 20150422 Cisco FireSIGHT Management Center Web Framework Stored Cross-Site Scripting Vulnerability Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425.

cpe:/o:cisco:ios:15.4%283%29s cpe:/o:cisco:ios:15.4%283%29s1 cpe:/o:cisco:ios:15.4%283%29sn1 cpe:/o:cisco:ios:15.4s cpe:/o:cisco:ios:15.4sn cpe:/o:cisco:ios:15.5%281%29s cpe:/o:cisco:ios:15.5s cpe:/o:cisco:ios_xe:3.13s.0 cpe:/o:cisco:ios_xe:3.13s.1 cpe:/o:cisco:ios_xe:3.14s.0

CVE-2015-0708

2015-04-28T21:59:00.073-04:00

2015-09-10T12:03:37.527-04:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-10T11:09:03.940-04:00

CISCO 20150428 Cisco IOS Software and Cisco IOS XE Software Crafted DHCPv6 Sequence Denial of Service Vulnerability SECTRACK 1032210 Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.

cpe:/o:cisco:ios:15.5%283%29s cpe:/o:cisco:ios:15.5s cpe:/o:cisco:ios_xe:-

CVE-2015-0709

2015-04-28T21:59:01.353-04:00

2015-09-10T12:04:03.620-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2015-09-10T11:09:17.313-04:00

CISCO 20150428 Cisco IOS Software and Cisco IOS XE Software Crafted RADIUS Packet Denial of Service Vulnerability SECTRACK 1032211 Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348.

cpe:/o:cisco:ios_xe:3.10.0s cpe:/o:cisco:ios_xe:3.10s.01

CVE-2015-0710

2015-04-28T21:59:02.247-04:00

2015-09-10T12:05:51.237-04:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-09-10T11:08:33.147-04:00

CISCO 20150428 Cisco IOS XE Software OTV Processing Code Denial of Service Vulnerability SECTRACK 1032212 The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335.

cpe:/o:cisco:staros:18.1.0.59776

CVE-2015-0711

2015-04-28T21:59:03.183-04:00

2015-09-10T12:07:19.700-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-09-10T11:08:24.160-04:00

CISCO 20150428 Cisco StarOS for Cisco ASR 5000 Series HAMGR Service Proxy Mobile IPv6 Processing Denial of Service Vulnerability SECTRACK 1032213 The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and call-processing outage) via malformed PM packets, aka Bug ID CSCut94711.

cpe:/o:cisco:staros:12.0 cpe:/o:cisco:staros:12.2%28300%29 cpe:/o:cisco:staros:14.0 cpe:/o:cisco:staros:14.0%28600%29

CVE-2015-0712

2015-05-01T06:59:01.153-04:00

2015-09-10T12:08:13.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2015-09-10T11:09:44.110-04:00

CISCO 20150429 Cisco StarOS for Cisco ASR 5000 Series HTTP Packet Processing Denial of Service Vulnerability SECTRACK 1032219 The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.

cpe:/a:cisco:telepresence_advanced_media_gateway:1.0%28.1.13%29 cpe:/a:cisco:telepresence_advanced_media_gateway:1.1%28.1.14%29 cpe:/a:cisco:telepresence_advanced_media_gateway:1.1%281.34%29 cpe:/a:cisco:telepresence_ip_gateway:2.0.1.7 cpe:/a:cisco:telepresence_ip_gateway:2.0.1.11 cpe:/a:cisco:telepresence_ip_gateway:2.0.3.34 cpe:/a:cisco:telepresence_ip_vcr_1.0_converter:1.0%281.9%29 cpe:/a:cisco:telepresence_ip_vcr_2.4:1.2 cpe:/a:cisco:telepresence_ip_vcr_3.0:1.22 cpe:/a:cisco:telepresence_ip_vcr_3.0:1.24 cpe:/a:cisco:telepresence_isdn_gw_3241:2.0%281.51%29 cpe:/a:cisco:telepresence_isdn_gw_3241:2.1%281.22%29 cpe:/a:cisco:telepresence_isdn_gw_3241:2.1%281.43%29 cpe:/a:cisco:telepresence_isdn_gw_3241:2.1%281.49%29 cpe:/a:cisco:telepresence_isdn_gw_3241:2.1%281.56%29 cpe:/a:cisco:telepresence_mcu_software:4.1%281.51%29 cpe:/a:cisco:telepresence_mcu_software:4.1%281.59%29 cpe:/a:cisco:telepresence_mcu_software:4.2%281.43%29 cpe:/a:cisco:telepresence_mcu_software:4.2%281.46%29 cpe:/a:cisco:telepresence_mcu_software:4.2%281.50%29 cpe:/a:cisco:telepresence_mcu_software:4.3%281.68%29 cpe:/a:cisco:telepresence_mcu_software:4.3%282.18%29 cpe:/a:cisco:telepresence_mcu_software:4.3%282.30%29 cpe:/a:cisco:telepresence_mcu_software:4.3%282.32%29 cpe:/a:cisco:telepresence_mcu_software:4.4%283.42%29 cpe:/a:cisco:telepresence_mcu_software:4.4%283.49%29 cpe:/a:cisco:telepresence_serial_gateway:1.0.1.23 cpe:/a:cisco:telepresence_serial_gateway:1.0.1.34 cpe:/a:cisco:telepresence_serial_gateway:1.0.1.38 cpe:/a:cisco:telepresence_server_software:2.1%281.33%29 cpe:/a:cisco:telepresence_server_software:2.1%281.37%29 cpe:/a:cisco:telepresence_server_software:2.2%281.43%29 cpe:/a:cisco:telepresence_server_software:2.2%281.48%29 cpe:/a:cisco:telepresence_server_software:2.2%281.54%29 cpe:/a:cisco:telepresence_server_software:2.3%281.55%29 cpe:/a:cisco:telepresence_server_software:2.3%281.57%29 cpe:/a:cisco:telepresence_server_software:3.0%282.24%29 cpe:/a:cisco:telepresence_server_software:4.0%281.57%29 cpe:/a:cisco:telepresence_server_software:4.0%282.8%29 cpe:/a:cisco:telepresence_supervisor_mse_8050_software:2.1%281.18%29 cpe:/a:cisco:telepresence_supervisor_mse_8050_software:2.2%281.17%29 cpe:/a:cisco:telepresence_supervisor_mse_8050_software:2.3%281.32%29

CVE-2015-0713

2015-05-24T20:59:01.357-04:00

2015-05-26T13:47:03.403-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2015-05-26T09:07:50.110-04:00

ALLOWS_ADMIN_ACCESS

CISCO 20150513 Command Injection Vulnerability in Multiple Cisco TelePresence Products The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco TelePresence MCU Software before 4.4(3.54) and 4.5 before 4.5(1.45), Cisco TelePresence MSE Supervisor Software before 2.3(1.38), Cisco TelePresence Serial Gateway Series Software before 1.0(1.42), Cisco TelePresence Server Software for Hardware before 3.1(1.98), and Cisco TelePresence Server Software for Virtual Machine before 4.1(1.79) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors, aka Bug IDs CSCul55968, CSCur08993, CSCur15803, CSCur15807, CSCur15825, CSCur15832, CSCur15842, CSCur15850, and CSCur15855.

cpe:/a:cisco:finesse:10.0%281%29_base cpe:/a:cisco:finesse:10.5%281%29_base cpe:/a:cisco:finesse:10.6%281%29_base cpe:/a:cisco:finesse:11.0%281%29_base

CVE-2015-0714

2015-05-02T10:59:00.103-04:00

2015-09-10T12:09:37.427-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2015-09-10T11:09:35.157-04:00

CISCO 20150501 Cisco Finesse Server Cross-Site Scripting Vulnerability SECTRACK 1032222 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.

cpe:/a:cisco:unity_connection:11.0%280.98000.225%29

CVE-2015-0715

2015-05-06T21:59:03.433-04:00

2015-09-10T12:09:57.660-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-09-10T11:09:57.687-04:00

CISCO 20150505 Cisco Unified Communications Manager SQL Injection Vulnerability SECTRACK 1032260 SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608.

cpe:/a:cisco:unity_connection:11.0%280.98000.225%29 cpe:/a:cisco:unity_connection:11.0%280.98000.332%29

CVE-2015-0716

2015-05-06T21:59:04.420-04:00

2015-09-10T12:10:12.830-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-09-10T11:10:59.807-04:00

CISCO 20150505 Cisco Unity Connection CUCReports Page Cross-Site Request Forgery Vulnerability SECTRACK 1032259 Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.

cpe:/a:cisco:unified_communications_manager:10.0%281.10000.12%29

CVE-2015-0717

2015-05-16T10:59:00.063-04:00

2017-01-06T11:28:59.943-05:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T11:04:47.983-05:00

CISCO 20150508 Cisco Unified Communications Manager root Shell Access Local Privilege Escalation Vulnerability SECTRACK 1032278 Cisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546.

cpe:/a:cisco:unified_computing_system:1.4_1i cpe:/a:cisco:unified_computing_system:1.4_1j cpe:/a:cisco:unified_computing_system:1.4_1m cpe:/a:cisco:unified_computing_system:1.4_3i cpe:/a:cisco:unified_computing_system:1.4_3l cpe:/a:cisco:unified_computing_system:1.4_3m cpe:/a:cisco:unified_computing_system:1.4_3q cpe:/a:cisco:unified_computing_system:1.4_3s cpe:/a:cisco:unified_computing_system:1.4_3u cpe:/a:cisco:unified_computing_system:1.4_3y cpe:/a:cisco:unified_computing_system:1.4_4f cpe:/a:cisco:unified_computing_system:1.4_4g cpe:/a:cisco:unified_computing_system:1.4_4i cpe:/a:cisco:unified_computing_system:1.4_4j cpe:/a:cisco:unified_computing_system:1.4_4k cpe:/a:cisco:unified_computing_system:1.4_4l cpe:/a:cisco:unified_computing_system:1.5%5c%283%5c%29 cpe:/a:cisco:unified_computing_system:1.5_base cpe:/a:cisco:unified_computing_system:1.6%5c%280.16%5c%29 cpe:/a:cisco:unified_computing_system:1.6_base cpe:/a:cisco:unified_computing_system:2.0_1q cpe:/a:cisco:unified_computing_system:2.0_1s cpe:/a:cisco:unified_computing_system:2.0_1t cpe:/a:cisco:unified_computing_system:2.0_1w cpe:/a:cisco:unified_computing_system:2.0_1x cpe:/a:cisco:unified_computing_system:2.0_2m cpe:/a:cisco:unified_computing_system:2.0_2q cpe:/a:cisco:unified_computing_system:2.0_2r cpe:/a:cisco:unified_computing_system:2.0_3a cpe:/a:cisco:unified_computing_system:2.0_3b cpe:/a:cisco:unified_computing_system:2.0_3c cpe:/a:cisco:unified_computing_system:2.0_4a cpe:/a:cisco:unified_computing_system:2.0_4b cpe:/a:cisco:unified_computing_system:2.0_4d cpe:/a:cisco:unified_computing_system:2.0_5a cpe:/a:cisco:unified_computing_system:2.0_5b cpe:/a:cisco:unified_computing_system:2.0_5c cpe:/a:cisco:unified_computing_system:2.0_5d cpe:/a:cisco:unified_computing_system:2.0_5e cpe:/a:cisco:unified_computing_system:2.0_5f cpe:/a:cisco:unified_computing_system:2.1_1a cpe:/a:cisco:unified_computing_system:2.1_1b cpe:/a:cisco:unified_computing_system:2.1_1d cpe:/a:cisco:unified_computing_system:2.1_1e cpe:/a:cisco:unified_computing_system:2.1_1f cpe:/a:cisco:unified_computing_system:2.1_2a cpe:/a:cisco:unified_computing_system:2.1_2c cpe:/a:cisco:unified_computing_system:2.1_2d cpe:/a:cisco:unified_computing_system:2.1_3a cpe:/a:cisco:unified_computing_system:2.1_3b cpe:/a:cisco:unified_computing_system:2.1_3c cpe:/a:cisco:unified_computing_system:2.1_3d cpe:/a:cisco:unified_computing_system:2.1_3e cpe:/a:cisco:unified_computing_system:2.1_3f cpe:/a:cisco:unified_computing_system:2.2_1b cpe:/a:cisco:unified_computing_system:2.2_1c cpe:/a:cisco:unified_computing_system:2.2_1d cpe:/a:cisco:unified_computing_system:2.2_1e cpe:/a:cisco:unified_computing_system:2.2_2c cpe:/a:cisco:unified_computing_system:2.2_2d cpe:/a:cisco:unified_computing_system:2.2_2e cpe:/o:cisco:nx-os:4.0%5c%280%5c%29n1%5c%281a%5c%29 cpe:/o:cisco:nx-os:4.0%5c%280%5c%29n1%5c%282%5c%29 cpe:/o:cisco:nx-os:4.0%5c%280%5c%29n1%5c%282a%5c%29 cpe:/o:cisco:nx-os:4.0%5c%281a%5c%29n1%5c%281%5c%29 cpe:/o:cisco:nx-os:4.0%5c%281a%5c%29n1%5c%281a%5c%29 cpe:/o:cisco:nx-os:4.0%5c%281a%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:4.0%5c%281a%5c%29n2%5c%281a%5c%29 cpe:/o:cisco:nx-os:4.1.%5c%282%5c%29 cpe:/o:cisco:nx-os:4.1.%5c%283%5c%29 cpe:/o:cisco:nx-os:4.1.%5c%284%5c%29 cpe:/o:cisco:nx-os:4.1.%5c%285%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281b%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281c%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281d%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281e%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281f%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281g%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281h%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281i%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281j%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281k%5c%29 cpe:/o:cisco:nx-os:4.1%5c%282%5c%29e1%5c%281m%5c%29 cpe:/o:cisco:nx-os:4.1%5c%283%5c%29n1%5c%281%5c%29 cpe:/o:cisco:nx-os:4.1%5c%283%5c%29n1%5c%281a%5c%29 cpe:/o:cisco:nx-os:4.1%5c%283%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:4.1%5c%283%5c%29n2%5c%281a%5c%29 cpe:/o:cisco:nx-os:4.2.%5c%282a%5c%29 cpe:/o:cisco:nx-os:4.2%5c%281%5c%29n1%5c%281%5c%29 cpe:/o:cisco:nx-os:4.2%5c%281%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:4.2%5c%281%5c%29n2%5c%281a%5c%29 cpe:/o:cisco:nx-os:4.2%5c%283%5c%29 cpe:/o:cisco:nx-os:4.2%5c%284%5c%29 cpe:/o:cisco:nx-os:4.2%5c%286%5c%29 cpe:/o:cisco:nx-os:4.2%5c%288%5c%29 cpe:/o:cisco:nx-os:5.0%5c%282%5c%29n1%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%282%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%282%5c%29n2%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%282a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29n1%5c%281c%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29n2%5c%282%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29n2%5c%282a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29n2%5c%282b%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u1%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u1%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u1%5c%281b%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u1%5c%281d%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u1%5c%282%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u1%5c%282a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u2%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u2%5c%282%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u2%5c%282a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u2%5c%282b%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u2%5c%282c%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u2%5c%282d%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u3%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u3%5c%282%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u3%5c%282a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u3%5c%282b%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u4%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281b%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281c%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281d%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281e%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281f%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281g%5c%29 cpe:/o:cisco:nx-os:5.0%5c%283%5c%29u5%5c%281h%5c%29 cpe:/o:cisco:nx-os:5.0%5c%285%5c%29 cpe:/o:cisco:nx-os:5.1%5c%281%5c%29 cpe:/o:cisco:nx-os:5.1%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29n1%5c%281%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29n1%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29n2%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29n2%5c%281b%5c%29 cpe:/o:cisco:nx-os:5.1%5c%283%5c%29n2%5c%281c%5c%29 cpe:/o:cisco:nx-os:5.1%5c%284%5c%29 cpe:/o:cisco:nx-os:5.1%5c%285%5c%29 cpe:/o:cisco:nx-os:5.1%5c%286%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%281%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%281a%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%281b%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%282%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%282a%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%283%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%284%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%285%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%286%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%287%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%288%5c%29 cpe:/o:cisco:nx-os:5.2%5c%281%5c%29n1%5c%288a%5c%29 cpe:/o:cisco:nx-os:5.2%5c%283a%5c%29 cpe:/o:cisco:nx-os:5.2%5c%284%5c%29 cpe:/o:cisco:nx-os:5.2%5c%285%5c%29 cpe:/o:cisco:nx-os:5.2%5c%287%5c%29 cpe:/o:cisco:nx-os:6.0%5c%281%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n1%5c%282%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n1%5c%282a%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%281%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%281b%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%282%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%283%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%284%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%285%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%285a%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29n2%5c%286%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u1%5c%281%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u1%5c%281a%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u1%5c%282%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u1%5c%283%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u1%5c%284%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u2%5c%281%5c%29 cpe:/o:cisco:nx-os:6.0%5c%282%5c%29u2%5c%282%5c%29 cpe:/o:cisco:nx-os:6.0%5c%283%5c%29 cpe:/o:cisco:nx-os:6.0%5c%284%5c%29 cpe:/o:cisco:nx-os:6.1%5c%281%5c%29 cpe:/o:cisco:nx-os:6.1%5c%282%5c%29 cpe:/o:cisco:nx-os:6.1%5c%283%5c%29 cpe:/o:cisco:nx-os:base cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%281%5c%29::~~~vmware_vsphere~~ cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%282%5c%29::~~~vmware_vsphere~~ cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%283%5c%29::~~~vmware_vsphere~~ cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%283a%5c%29::~~~vmware_vsphere~~ cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%283b%5c%29::~~~vmware_vsphere~~ cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%283c%5c%29::~~~vmware_vsphere~~ cpe:/o:cisco:nx-os_1000v_switch:4.0%5c%284%5c%29sv1%5c%283d%5c%29::~~~vmware_vsphere~~

CVE-2015-0718

2016-03-03T17:59:02.707-05:00

2016-12-02T22:02:55.883-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20160302 Cisco NX-OS Software TCP Netstack Denial of Service Vulnerability SECTRACK 1035159 SECTRACK 1035160 Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME_WAIT TCP session, aka Bug ID CSCub70579.

cpe:/o:cisco:nx-os:4.0%280%29n1%281a%29 cpe:/o:cisco:nx-os:4.0%280%29n1%282%29 cpe:/o:cisco:nx-os:4.0%280%29n1%282a%29 cpe:/o:cisco:nx-os:4.0%281a%29n1%281%29 cpe:/o:cisco:nx-os:4.0%281a%29n1%281a%29 cpe:/o:cisco:nx-os:4.0%281a%29n2%281%29 cpe:/o:cisco:nx-os:4.0%281a%29n2%281a%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%281%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%282%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%283%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%283a%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%283b%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%283c%29 cpe:/o:cisco:nx-os:4.0%284%29sv1%283d%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281b%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281d%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281e%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281f%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281g%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281h%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281i%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281j%29 cpe:/o:cisco:nx-os:4.1%283%29n1%281%29 cpe:/o:cisco:nx-os:4.1%283%29n1%281a%29 cpe:/o:cisco:nx-os:4.1%283%29n2%281%29 cpe:/o:cisco:nx-os:4.1%283%29n2%281a%29 cpe:/o:cisco:nx-os:4.1.%282%29 cpe:/o:cisco:nx-os:4.1.%283%29 cpe:/o:cisco:nx-os:4.1.%284%29 cpe:/o:cisco:nx-os:4.1.%285%29 cpe:/o:cisco:nx-os:4.2%281%29n1%281%29 cpe:/o:cisco:nx-os:4.2%281%29n2%281%29 cpe:/o:cisco:nx-os:4.2%281%29n2%281a%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%284%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%284a%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%284b%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%285.1%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%285.1a%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%285.2%29 cpe:/o:cisco:nx-os:4.2%281%29sv1%285.2b%29 cpe:/o:cisco:nx-os:4.2%281%29sv2%281.1%29 cpe:/o:cisco:nx-os:4.2%281%29sv2%281.1a%29 cpe:/o:cisco:nx-os:4.2%281%29sv2%282.1%29 cpe:/o:cisco:nx-os:4.2%281%29sv2%282.1a%29 cpe:/o:cisco:nx-os:4.2%283%29 cpe:/o:cisco:nx-os:4.2%284%29 cpe:/o:cisco:nx-os:4.2%286%29 cpe:/o:cisco:nx-os:4.2%288%29 cpe:/o:cisco:nx-os:4.2.%282a%29 cpe:/o:cisco:nx-os:5.0%282%29n1%281%29 cpe:/o:cisco:nx-os:5.0%282%29n2%281%29 cpe:/o:cisco:nx-os:5.0%282%29n2%281a%29 cpe:/o:cisco:nx-os:5.0%282a%29 cpe:/o:cisco:nx-os:5.0%283%29 cpe:/o:cisco:nx-os:5.0%283%29n1%281c%29 cpe:/o:cisco:nx-os:5.0%283%29n2%281%29 cpe:/o:cisco:nx-os:5.0%283%29n2%282%29 cpe:/o:cisco:nx-os:5.0%283%29n2%282a%29 cpe:/o:cisco:nx-os:5.0%283%29n2%282b%29 cpe:/o:cisco:nx-os:5.0%283%29u1%281%29 cpe:/o:cisco:nx-os:5.0%283%29u1%281a%29 cpe:/o:cisco:nx-os:5.0%283%29u1%281b%29 cpe:/o:cisco:nx-os:5.0%283%29u1%281d%29 cpe:/o:cisco:nx-os:5.0%283%29u1%282%29 cpe:/o:cisco:nx-os:5.0%283%29u1%282a%29 cpe:/o:cisco:nx-os:5.0%283%29u2%281%29 cpe:/o:cisco:nx-os:5.0%283%29u2%282%29 cpe:/o:cisco:nx-os:5.0%283%29u2%282a%29 cpe:/o:cisco:nx-os:5.0%283%29u2%282b%29 cpe:/o:cisco:nx-os:5.0%283%29u2%282c%29 cpe:/o:cisco:nx-os:5.0%283%29u2%282d%29 cpe:/o:cisco:nx-os:5.0%283%29u3%281%29 cpe:/o:cisco:nx-os:5.0%283%29u3%282%29 cpe:/o:cisco:nx-os:5.0%283%29u3%282a%29 cpe:/o:cisco:nx-os:5.0%283%29u3%282b%29 cpe:/o:cisco:nx-os:5.0%283%29u4%281%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281a%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281b%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281c%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281e%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281f%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281g%29 cpe:/o:cisco:nx-os:5.0%283%29u5%281h%29 cpe:/o:cisco:nx-os:5.0%285%29 cpe:/o:cisco:nx-os:5.1%281%29 cpe:/o:cisco:nx-os:5.1%281a%29 cpe:/o:cisco:nx-os:5.1%283%29 cpe:/o:cisco:nx-os:5.1%283%29n1%281%29 cpe:/o:cisco:nx-os:5.1%283%29n1%281a%29 cpe:/o:cisco:nx-os:5.1%283%29n2%281%29 cpe:/o:cisco:nx-os:5.1%283%29n2%281a%29 cpe:/o:cisco:nx-os:5.1%283%29n2%281b%29 cpe:/o:cisco:nx-os:5.1%283%29n2%281c%29 cpe:/o:cisco:nx-os:5.1%284%29 cpe:/o:cisco:nx-os:5.1%285%29 cpe:/o:cisco:nx-os:5.1%286%29 cpe:/o:cisco:nx-os:5.2%281%29 cpe:/o:cisco:nx-os:5.2%281%29n1%281%29 cpe:/o:cisco:nx-os:5.2%281%29n1%281a%29 cpe:/o:cisco:nx-os:5.2%281%29n1%281b%29 cpe:/o:cisco:nx-os:5.2%281%29n1%282%29 cpe:/o:cisco:nx-os:5.2%281%29n1%282a%29 cpe:/o:cisco:nx-os:5.2%281%29n1%283%29 cpe:/o:cisco:nx-os:5.2%281%29n1%284%29 cpe:/o:cisco:nx-os:5.2%281%29n1%285%29 cpe:/o:cisco:nx-os:5.2%281%29n1%286%29 cpe:/o:cisco:nx-os:5.2%281%29n1%287%29 cpe:/o:cisco:nx-os:5.2%281%29n1%288%29 cpe:/o:cisco:nx-os:5.2%281%29n1%288a%29 cpe:/o:cisco:nx-os:5.2%281%29sm1%285.1%29 cpe:/o:cisco:nx-os:5.2%283a%29 cpe:/o:cisco:nx-os:5.2%284%29 cpe:/o:cisco:nx-os:5.2%285%29 cpe:/o:cisco:nx-os:5.2%287%29 cpe:/o:cisco:nx-os:5.2%289%29 cpe:/o:cisco:nx-os:6.0%281%29 cpe:/o:cisco:nx-os:6.0%282%29 cpe:/o:cisco:nx-os:6.0%282%29n1%281%29 cpe:/o:cisco:nx-os:6.0%282%29n1%282%29 cpe:/o:cisco:nx-os:6.0%282%29n1%282a%29 cpe:/o:cisco:nx-os:6.0%282%29n2%281%29 cpe:/o:cisco:nx-os:6.0%282%29n2%281b%29 cpe:/o:cisco:nx-os:6.0%282%29n2%282%29 cpe:/o:cisco:nx-os:6.0%282%29n2%283%29 cpe:/o:cisco:nx-os:6.0%282%29n2%284%29 cpe:/o:cisco:nx-os:6.0%282%29n2%285%29 cpe:/o:cisco:nx-os:6.0%282%29u1%281%29 cpe:/o:cisco:nx-os:6.0%282%29u1%281a%29 cpe:/o:cisco:nx-os:6.0%282%29u1%282%29 cpe:/o:cisco:nx-os:6.0%282%29u1%283%29 cpe:/o:cisco:nx-os:6.0%282%29u1%284%29 cpe:/o:cisco:nx-os:6.0%282%29u2%281%29 cpe:/o:cisco:nx-os:6.0%282%29u2%282%29 cpe:/o:cisco:nx-os:6.0%282%29u2%283%29 cpe:/o:cisco:nx-os:6.0%282%29u2%284%29 cpe:/o:cisco:nx-os:6.0%282%29u2%285%29 cpe:/o:cisco:nx-os:6.0%282%29u2%286%29 cpe:/o:cisco:nx-os:6.0%282%29u3%281%29 cpe:/o:cisco:nx-os:6.0%282%29u3%282%29 cpe:/o:cisco:nx-os:6.0%282%29u3%283%29 cpe:/o:cisco:nx-os:6.0%282%29u3%284%29 cpe:/o:cisco:nx-os:6.0%282%29u3%285%29 cpe:/o:cisco:nx-os:6.0%282%29u4%281%29 cpe:/o:cisco:nx-os:6.0%282%29u4%282%29 cpe:/o:cisco:nx-os:6.0%282%29u4%283%29 cpe:/o:cisco:nx-os:6.0%282%29u5%281%29 cpe:/o:cisco:nx-os:6.0%283%29 cpe:/o:cisco:nx-os:6.0%284%29 cpe:/o:cisco:nx-os:6.1%281%29 cpe:/o:cisco:nx-os:6.1%282%29 cpe:/o:cisco:nx-os:6.1%282%29i2%281%29 cpe:/o:cisco:nx-os:6.1%282%29i2%282%29 cpe:/o:cisco:nx-os:6.1%282%29i2%282a%29 cpe:/o:cisco:nx-os:6.1%282%29i2%282b%29 cpe:/o:cisco:nx-os:6.1%282%29i2%283%29 cpe:/o:cisco:nx-os:6.1%282%29i3%281%29 cpe:/o:cisco:nx-os:6.1%282%29i3%282%29 cpe:/o:cisco:nx-os:6.1%282%29i3%283%29 cpe:/o:cisco:nx-os:6.1%283%29 cpe:/o:cisco:nx-os:6.1%284%29 cpe:/o:cisco:nx-os:6.1%284a%29 cpe:/o:cisco:nx-os:6.2%282%29 cpe:/o:cisco:nx-os:6.2%282a%29 cpe:/o:cisco:nx-os:6.2%286%29 cpe:/o:cisco:nx-os:6.2%286b%29 cpe:/o:cisco:nx-os:6.2%288%29 cpe:/o:cisco:nx-os:6.2%288a%29 cpe:/o:cisco:nx-os:6.2%288b%29 cpe:/o:cisco:nx-os:6.2%2810%29 cpe:/o:cisco:nx-os:7.0%280%29n1%281%29 cpe:/o:cisco:nx-os:7.0%281%29n1%281%29 cpe:/o:cisco:nx-os:7.0%282%29n1%281%29 cpe:/o:cisco:nx-os:7.0%283%29n1%281%29 cpe:/o:cisco:nx-os:11.0%281b%29 cpe:/o:cisco:nx-os:11.0%281c%29 cpe:/o:cisco:nx-os:base

CVE-2015-0721

2016-10-06T06:59:00.210-04:00

2017-07-29T21:29:00.413-04:00

9.0

NETWORK

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov CISCO 20161005 Cisco NX-OS Software-Based Products Authentication, Authorization, and Accounting Bypass Vulnerability BID 93410 SECTRACK 1036947 Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote authenticated users to bypass intended AAA restrictions and obtain privileged CLI access via crafted parameters in an SSH connection negotiation, aka Bug IDs CSCum35502, CSCuw78669, CSCuw79754, and CSCux88492.

cpe:/a:cisco:telepresence_tc_software:3.1.5 cpe:/a:cisco:telepresence_tc_software:3.1_base cpe:/a:cisco:telepresence_tc_software:4.1.0 cpe:/a:cisco:telepresence_tc_software:4.1.1 cpe:/a:cisco:telepresence_tc_software:4.1.2 cpe:/a:cisco:telepresence_tc_software:4.1_base cpe:/a:cisco:telepresence_tc_software:4.2.0 cpe:/a:cisco:telepresence_tc_software:4.2.1 cpe:/a:cisco:telepresence_tc_software:4.2.2 cpe:/a:cisco:telepresence_tc_software:4.2.3 cpe:/a:cisco:telepresence_tc_software:4.2.4 cpe:/a:cisco:telepresence_tc_software:4.2_base cpe:/a:cisco:telepresence_tc_software:5.0.2 cpe:/a:cisco:telepresence_tc_software:5.0.2-cucm cpe:/a:cisco:telepresence_tc_software:5.0_base cpe:/a:cisco:telepresence_tc_software:5.1.3 cpe:/a:cisco:telepresence_tc_software:5.1.3-cucm cpe:/a:cisco:telepresence_tc_software:5.1.4 cpe:/a:cisco:telepresence_tc_software:5.1.4-cucm cpe:/a:cisco:telepresence_tc_software:5.1.5 cpe:/a:cisco:telepresence_tc_software:5.1.5-cucm cpe:/a:cisco:telepresence_tc_software:5.1.6 cpe:/a:cisco:telepresence_tc_software:5.1.6-cucm cpe:/a:cisco:telepresence_tc_software:5.1.7 cpe:/a:cisco:telepresence_tc_software:5.1.7-cucm cpe:/a:cisco:telepresence_tc_software:5.1_base cpe:/a:cisco:telepresence_tc_software:6.0.0 cpe:/a:cisco:telepresence_tc_software:6.0.0-cucm cpe:/a:cisco:telepresence_tc_software:6.0.1 cpe:/a:cisco:telepresence_tc_software:6.0.1-cucm cpe:/a:cisco:telepresence_tc_software:6.0.2 cpe:/a:cisco:telepresence_tc_software:6.0.3 cpe:/a:cisco:telepresence_tc_software:6.0_base cpe:/a:cisco:telepresence_tc_software:6.1.0 cpe:/a:cisco:telepresence_tc_software:6.1.0-cucm cpe:/a:cisco:telepresence_tc_software:6.1.1 cpe:/a:cisco:telepresence_tc_software:6.1.1-cucm cpe:/a:cisco:telepresence_tc_software:6.1.2 cpe:/a:cisco:telepresence_tc_software:6.1.2-cucm cpe:/a:cisco:telepresence_tc_software:6.1.3 cpe:/a:cisco:telepresence_tc_software:6.1.4 cpe:/a:cisco:telepresence_tc_software:6.1_base cpe:/a:cisco:telepresence_tc_software:6.3.0 cpe:/a:cisco:telepresence_tc_software:6.3.1 cpe:/a:cisco:telepresence_tc_software:6.3.2 cpe:/a:cisco:telepresence_tc_software:6.3.3 cpe:/a:cisco:telepresence_tc_software:6.3.4 cpe:/a:cisco:telepresence_tc_software:7.1.0 cpe:/a:cisco:telepresence_tc_software:7.1.1 cpe:/a:cisco:telepresence_tc_software:7.1.2 cpe:/a:cisco:telepresence_tc_software:7.1.3 cpe:/a:cisco:telepresence_tc_software:7.1.4 cpe:/a:cisco:telepresence_tc_software:7.2.0 cpe:/a:cisco:telepresence_tc_software:7.2.1 cpe:/a:cisco:telepresence_tc_software:7.3.0 cpe:/a:cisco:telepresence_tc_software:7.3.1 cpe:/a:cisco:telepresence_te_software:6.0.0 cpe:/a:cisco:telepresence_te_software:6.0.1 cpe:/a:cisco:telepresence_te_software:6.0.2 cpe:/a:cisco:telepresence_te_software:6.0_base

CVE-2015-0722

2015-05-24T20:59:02.637-04:00

2015-05-26T13:40:56.050-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-05-26T08:49:44.390-04:00

CISCO 20150513 Multiple Vulnerabilities in Cisco TelePresence TC and TE Software The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a flood of crafted IP packets, aka Bug ID CSCuj68952.

cpe:/o:cisco:wireless_lan_controller_software:7.5.102.0 cpe:/o:cisco:wireless_lan_controller_software:7.5.102.11 cpe:/o:cisco:wireless_lan_controller_software:7.6.100.0

CVE-2015-0723

2015-05-16T10:59:01.203-04:00

2017-01-06T11:05:02.860-05:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T10:46:22.240-05:00

CISCO 20150508 Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability SECTRACK 1032277 The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.

cpe:/o:cisco:headend_digital_broadband_delivery_system:-

CVE-2015-0724

2015-05-14T21:59:03.173-04:00

2017-01-06T12:09:43.883-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:20:17.873-05:00

CISCO 20150512 Cisco Headend Digital Broadband Delivery System Cross-Site Scripting Vulnerability SECTRACK 1032304 Multiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCur25604.

cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:1.0.0 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.0%281%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.0%283%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.2%281%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.4%281%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.4%283%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.4%285%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5%281%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5%283%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5%287%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5%289%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5%2811%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%281%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29_b26 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29_b35 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29_b39 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29_b45 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29_b47 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6%283%29_b50 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.0.0 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b17 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b26 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b34 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b54 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b60 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.0 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.0_b26 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1_b9 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1_b15 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1_b20 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.0 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.0:r1 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:r1 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:r2 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:r3 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:r4 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:r5 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:r6 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:4.0.0 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:4.0.0:r1 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:4.0.0:r2 cpe:/a:cisco:videoscape_distribution_suite_for_internet_streaming:4.0.0:r3 cpe:/a:cisco:videoscape_distribution_suite_service_broker:1.0.1 cpe:/a:cisco:videoscape_distribution_suite_service_broker:1.0_base cpe:/a:cisco:videoscape_distribution_suite_service_broker:1.1_base

CVE-2015-0725

2015-07-16T17:59:00.090-04:00

2017-09-21T21:29:01.953-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CISCO 20150715 Cisco Videoscape Delivery System Denial of Service Vulnerability SECTRACK 1032936 Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.

cpe:/a:cisco:wireless_lan_controller_software:7.6.110.0 cpe:/o:cisco:wireless_lan_controller_software:7.0.98.0 cpe:/o:cisco:wireless_lan_controller_software:7.0.98.218 cpe:/o:cisco:wireless_lan_controller_software:7.0.116.0 cpe:/o:cisco:wireless_lan_controller_software:7.0.220.0 cpe:/o:cisco:wireless_lan_controller_software:7.0_base cpe:/o:cisco:wireless_lan_controller_software:7.4.1.54 cpe:/o:cisco:wireless_lan_controller_software:7.4.100 cpe:/o:cisco:wireless_lan_controller_software:7.4.100.60 cpe:/o:cisco:wireless_lan_controller_software:7.4.110.0 cpe:/o:cisco:wireless_lan_controller_software:7.4.121.0 cpe:/o:cisco:wireless_lan_controller_software:7.4_base cpe:/o:cisco:wireless_lan_controller_software:7.6.100.0

CVE-2015-0726

2015-05-16T10:59:02.187-04:00

2017-01-06T10:30:33.707-05:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T10:05:40.897-05:00

CISCO 20150513 Cisco Wireless LAN Controller Web Administration Interface Authenticated Remote Denial of Service Vulnerability BID 74641 SECTRACK 1032327 The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service (device crash) via unspecified parameters, aka Bug IDs CSCum65159 and CSCum65252.

cpe:/a:cisco:security_manager:4.7%280%29:sp1%281%29

CVE-2015-0727

2015-05-14T21:59:04.127-04:00

2017-01-06T10:30:58.430-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T10:11:51.057-05:00

CISCO 20150513 Cisco Security Manager Cross-Site Scripting Vulnerability SECTRACK 1032326 Cross-site scripting (XSS) vulnerability in the HTTP module in Cisco Security Manager (CSM) 4.7(0)SP1(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789.

cpe:/a:cisco:secure_access_control_system:5.5%280.1%29

CVE-2015-0728

2015-05-14T21:59:05.283-04:00

2017-01-06T12:12:05.433-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:34:16.173-05:00

CISCO 20150513 Cisco Access Control Server Cross-Site Scripting Vulnerability SECTRACK 1032328 Cross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002.

cpe:/a:cisco:secure_access_control_server:5.5%280.1%29

CVE-2015-0729

2015-05-16T10:59:03.093-04:00

2017-01-06T12:13:57.947-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:15:10.270-05:00

CISCO 20150514 Cisco Access Control Server File Inclusion Vulnerability SECTRACK 1032338 Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.

cpe:/a:cisco:wide_area_application_services:6.0%281%29

CVE-2015-0730

2015-05-16T10:59:03.953-04:00

2017-01-06T10:30:55.477-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T10:13:59.917-05:00

CISCO 20150514 Cisco Wide Area Application Services Server Message Block Protocol Module Denial of Service Vulnerability SECTRACK 1032339 The SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to cause a denial of service (module reload) via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645.

cpe:/o:cisco:ios:15.3%283%29s1 cpe:/o:cisco:ios:15.3s

CVE-2015-0731

2015-05-15T22:01:44.637-04:00

2017-01-06T12:13:11.330-05:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-06T11:26:53.193-05:00

CISCO 20150514 Cisco IOS Voice Gateway Malformed ISDN Q931 Message Denial of Service Vulnerability SECTRACK 1032337 The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID CSCut37890.

cpe:/a:cisco:content_security_management_virtual_appliance:9.1.0-033 cpe:/a:cisco:web_security_appliance:9.0.0-193 cpe:/o:cisco:email_security_appliance_firmware:8.5.6-113 cpe:/o:cisco:email_security_appliance_firmware:9.1.0-032 cpe:/o:cisco:email_security_appliance_firmware:9.1.1-000 cpe:/o:cisco:email_security_appliance_firmware:9.6.0-000

CVE-2015-0732

2015-07-28T21:59:00.093-04:00

2018-10-30T12:27:22.483-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150727 Cisco Email Security Appliance AsyncOS Cross-Site Scripting Vulnerability SECTRACK 1033086 SECTRACK 1033087 Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167.

cpe:/o:cisco:headend_digital_broadband_delivery_system:-

CVE-2015-0733

2015-05-30T10:59:00.067-04:00

2017-01-04T09:58:59.507-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T14:51:26.767-05:00

CISCO 20150529 Cisco Headend Digital Broadband Delivery System HTTP Response-Splitting Vulnerability SECTRACK 1032445 CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.

cpe:/o:cisco:email_security_appliance_firmware:8.5.6-106

CVE-2015-0734

2015-05-14T21:59:06.143-04:00

2018-10-30T12:27:22.403-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T10:37:14.667-05:00

CISCO 20150514 Cisco Email Security Appliance Cross-Site Scripting Vulnerability SECTRACK 1032333 Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCut87743.

cpe:/a:cisco:unified_customer_voice_portal:10.5%281%29

CVE-2015-0735

2015-05-16T21:59:01.237-04:00

2017-01-06T10:31:08.167-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T10:11:39.557-05:00

CISCO 20150515 Cisco Unified Customer Voice Portal Cross-Site Request Forgery Vulnerability SECTRACK 1032340 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970.

cpe:/a:cisco:mediasense:9.1%281%29 cpe:/a:cisco:mediasense:10.0%281%29 cpe:/a:cisco:mediasense:10.5%281%29

CVE-2015-0736

2015-05-15T22:01:45.667-04:00

2017-01-06T12:12:55.347-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T11:35:18.433-05:00

CISCO 20150514 Cisco MediaSense Cross-Site Request Forgery Vulnerability SECTRACK 1032336 Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728.

cpe:/a:cisco:firesight_system_software:5.3.1.1

CVE-2015-0737

2015-06-12T06:59:00.243-04:00

2017-01-04T09:59:12.147-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T15:39:34.407-05:00

CISCO 20150608 Cisco FireSIGHT Management Center Cross-Site Scripting Vulnerability SECTRACK 1032518 Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) GET or (2) POST parameter, aka Bug ID CSCuu11099.

cpe:/o:cisco:web_security_appliance:8.5.0-497

CVE-2015-0738

2015-05-16T21:59:02.113-04:00

2017-01-06T12:12:51.063-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:25:26.993-05:00

CISCO 20150515 Cisco Web Security Appliance Web Tracking Report Page Cross-Site Scripting Vulnerability SECTRACK 1032349 Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008.

cpe:/a:cisco:firesight_system_software:5.3.0

CVE-2015-0739

2015-05-18T22:00:18.917-04:00

2017-01-06T12:09:12.457-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-06T11:23:57.480-05:00

CISCO 20150518 Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability BID 74709 SECTRACK 1032359 The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.

cpe:/o:cisco:unified_intelligence_center:10.6%281%29

CVE-2015-0740

2015-05-19T20:59:00.077-04:00

2017-01-06T12:03:22.267-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T11:29:22.260-05:00

CISCO 20150519 Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability BID 74732 SECTRACK 1032367 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.

cpe:/a:cisco:hosted_collaboration_solution:10.6%281%29

CVE-2015-0741

2015-05-21T06:59:00.067-04:00

2017-01-06T12:03:08.377-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T11:35:03.057-05:00

CISCO 20150520 Cisco Prime Central for HCS Multiple Cross-Site Request Forgery Vulnerabilities BID 74754 SECTRACK 1032380 Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.

cpe:/a:cisco:adaptive_security_appliance_software:9.2%280.0%29 cpe:/a:cisco:adaptive_security_appliance_software:9.2%280.104%29 cpe:/a:cisco:adaptive_security_appliance_software:9.2%283.1%29 cpe:/a:cisco:adaptive_security_appliance_software:9.2%283.4%29 cpe:/a:cisco:adaptive_security_appliance_software:9.3%281.105%29 cpe:/a:cisco:adaptive_security_appliance_software:9.3%282.100%29 cpe:/a:cisco:adaptive_security_appliance_software:9.4%280.115%29 cpe:/a:cisco:adaptive_security_appliance_software:100.13%280.21%29 cpe:/a:cisco:adaptive_security_appliance_software:100.13%2820.3%29 cpe:/a:cisco:adaptive_security_appliance_software:100.13%2821.9%29 cpe:/a:cisco:adaptive_security_appliance_software:100.14%281.1%29

CVE-2015-0742

2015-05-21T06:59:02.067-04:00

2017-01-06T12:03:02.780-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-06T11:20:39.720-05:00

CISCO 20150520 Cisco Adaptive Security Appliance Protocol Independent Multicast Registration Vulnerability BID 74750 SECTRACK 1032381 The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registration, which allows remote attackers to cause a denial of service (forwarding outage) via a crafted multicast packet, aka Bug ID CSCus74398.

cpe:/o:cisco:headend_digital_broadband_delivery_system:- cpe:/o:cisco:headend_system_release:2.5 cpe:/o:cisco:headend_system_release:2.7 cpe:/o:cisco:headend_system_release:3.2 cpe:/o:cisco:headend_system_release:3.5 cpe:/o:cisco:headend_system_release:3.7 cpe:/o:cisco:headend_system_release:i4.3

CVE-2015-0743

2015-05-30T10:59:01.757-04:00

2017-01-04T10:44:17.420-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-02T15:39:07.637-05:00

CISCO 20150529 Cisco Headend System Release UDP TFTP and DHCP Denial of Service Vulnerability SECTRACK 1032445 Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.

cpe:/o:cisco:dta_control_system:4.0.0.9 cpe:/o:cisco:headend_digital_broadband_delivery_system:- cpe:/o:cisco:headend_system_release:2.5 cpe:/o:cisco:headend_system_release:2.7 cpe:/o:cisco:headend_system_release:3.2 cpe:/o:cisco:headend_system_release:3.5 cpe:/o:cisco:headend_system_release:3.7 cpe:/o:cisco:headend_system_release:i4.3

CVE-2015-0744

2015-05-30T10:59:02.723-04:00

2017-01-04T10:44:13.873-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-02T15:58:16.677-05:00

CISCO 20150529 Multiple Cisco Products TCP Flood Denial of Service Vulnerability BID 74916 SECTRACK 1032445 Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.

CVE-2015-0745

2015-05-30T10:59:03.833-04:00

2017-01-04T10:44:10.483-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T16:02:45.353-05:00

CISCO 20150529 Cisco Headend System Release Archive File Download Vulnerability SECTRACK 1032445 Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.

cpe:/a:cisco:secure_access_control_server:5.5%280.46.2%29

CVE-2015-0746

2015-05-21T20:59:00.097-04:00

2016-04-06T08:47:42.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2016-04-05T14:33:37.683-04:00

CISCO 20150521 Cisco Access Control Server Representational State Transfer Application Programming Interface Denial of Service Vulnerability SECTRACK 1032387 The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.

cpe:/a:cisco:videoscape_conductor:3.0 cpe:/o:cisco:headend_digital_broadband_delivery_system:- cpe:/o:cisco:headend_system_release:2.5 cpe:/o:cisco:headend_system_release:2.7 cpe:/o:cisco:headend_system_release:3.2 cpe:/o:cisco:headend_system_release:3.5 cpe:/o:cisco:headend_system_release:3.7 cpe:/o:cisco:headend_system_release:i4.3

CVE-2015-0747

2015-05-30T10:59:04.817-04:00

2017-01-04T10:44:06.467-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T15:28:38.253-05:00

CISCO 20150529 Cisco Conductor for Videoscape and Cisco Headend System Release HTTP Injection Vulnerability SECTRACK 1032447 Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

cpe:/a:cisco:hosted_collaboration_solution:8.0%282%29_base cpe:/a:cisco:hosted_collaboration_solution:8.6%281%29_base cpe:/a:cisco:hosted_collaboration_solution:8.6%282%29_base cpe:/a:cisco:hosted_collaboration_solution:9.0%281%29_base cpe:/a:cisco:hosted_collaboration_solution:9.1%281%29_base cpe:/a:cisco:hosted_collaboration_solution:9.2%281%29_base cpe:/a:cisco:hosted_collaboration_solution:9.5%281%29_base cpe:/a:cisco:hosted_collaboration_solution:10.0%281%29_base cpe:/a:cisco:hosted_collaboration_solution:10.1%281%29_base cpe:/a:cisco:hosted_collaboration_solution:10.1%282%29_base cpe:/a:cisco:hosted_collaboration_solution:10.5%281%29_base cpe:/a:cisco:hosted_collaboration_solution:10.6%282%29_base

CVE-2015-0750

2015-05-22T21:59:00.077-04:00

2015-05-26T13:40:04.830-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2015-05-26T08:55:40.870-04:00

CISCO 20150522 Cisco HCS Administrative Web Interface Arbitrary Command Execution Vulnerability The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.

cpe:/a:cisco:unified_communications_manager:10.3%281%29

CVE-2015-0751

2015-05-29T11:59:05.390-04:00

2017-01-04T10:36:38.417-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-02T15:24:22.593-05:00

CISCO 20150526 Cisco IP Phone 7861 Denial of Service Vulnerability SECTRACK 1032407 Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800.

cpe:/a:cisco:telepresence_video_communication_server:x8.5.1

CVE-2015-0752

2015-05-29T11:59:06.483-04:00

2017-01-04T10:34:50.540-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-03T09:42:55.617-05:00

CISCO 20150527 Cisco Telepresence Video Communication Server Cross-Site Scripting Vulnerability SECTRACK 1032421 Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.

cpe:/a:cisco:unified_web_and_e-mail_interaction_manager:9.0%282%29

CVE-2015-0753

2015-05-29T11:59:07.373-04:00

2017-01-04T10:34:44.883-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-03T09:39:56.513-05:00

CISCO 20150527 Cisco Unified Email Interaction Manager and Cisco Unified Web Interaction Manager SQL Injection Vulnerability SECTRACK 1032422 SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.

cpe:/a:cisco:finesse:10.5%281%29_base

CVE-2015-0754

2015-05-29T11:59:08.373-04:00

2017-01-04T10:34:30.567-05:00

7.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

COMPLETE

http://nvd.nist.gov

2017-01-03T09:55:33.803-05:00

CISCO 20150527 Cisco Finesse XML Processing Denial of Service Vulnerability SECTRACK 1032423 Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%2864%29

CVE-2015-0755

2015-05-29T11:59:09.327-04:00

2017-01-04T10:34:16.910-05:00

6.8

LOCAL

LOW

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

2017-01-03T09:48:56.230-05:00

CISCO 20150527 Cisco Identity Services Engine Privilege Escalation Vulnerability SECTRACK 1032424 The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.

cpe:/a:cisco:wireless_lan_controller:7.4%281.1%29

CVE-2015-0756

2015-05-29T11:59:10.203-04:00

2017-01-04T10:05:37.750-05:00

6.1

ADJACENT_NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-03T09:38:46.707-05:00

CISCO 20150527 Cisco Wireless LAN Controller TCP Denial of Service Vulnerability SECTRACK 1032419 Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104.

cpe:/a:cisco:identity_services_engine_software:1.2%281.901%29 cpe:/a:cisco:identity_services_engine_software:1.3%280.722%29

CVE-2015-0757

2015-05-29T11:59:11.170-04:00

2017-03-23T21:59:00.813-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20150527 Cisco Identity Services Engine Information Disclosure Vulnerability BID 74864 SECTRACK 1032420 The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.

cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0758

2015-05-30T10:59:05.660-04:00

2017-01-04T09:56:47.080-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T15:29:47.653-05:00

CISCO 20150529 Cisco Unified MeetingPlace XML Processing Information Disclosure Vulnerability SECTRACK 1032448 The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.

cpe:/o:cisco:headend_digital_broadband_delivery_system:-

CVE-2015-0759

2015-06-02T10:59:02.927-04:00

2017-01-04T09:56:26.797-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2017-01-02T13:27:58.717-05:00

CISCO 20150601 Cisco Headend Digital Broadband Delivery System Cross-Site Request Forgery Vulnerability SECTRACK 1032446 Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users.

cpe:/a:cisco:adaptive_security_appliance_software:7.0 cpe:/a:cisco:adaptive_security_appliance_software:7.0%280%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%281%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%282%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%284%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%285%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%285.2%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%286%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%286.7%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%287%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0%288%29 cpe:/a:cisco:adaptive_security_appliance_software:7.0.1 cpe:/a:cisco:adaptive_security_appliance_software:7.0.1.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.3 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.4.3 cpe:/a:cisco:adaptive_security_appliance_software:7.0.5 cpe:/a:cisco:adaptive_security_appliance_software:7.0.5.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.18 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.22 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.26 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.29 cpe:/a:cisco:adaptive_security_appliance_software:7.0.6.32 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.1 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.4 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.9 cpe:/a:cisco:adaptive_security_appliance_software:7.0.7.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8:interim cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.2 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.8 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.12 cpe:/a:cisco:adaptive_security_appliance_software:7.0.8.13 cpe:/a:cisco:adaptive_security_appliance_software:7.1 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.5%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.27%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.48%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%282.49%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1%285%29 cpe:/a:cisco:adaptive_security_appliance_software:7.1.1 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.16 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.20 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.24 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.28 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.38 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.42 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.46 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.49 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.53 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.61 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.64 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.72 cpe:/a:cisco:adaptive_security_appliance_software:7.1.2.81 cpe:/a:cisco:adaptive_security_appliance_software:7.2 cpe:/a:cisco:adaptive_security_appliance_software:7.2%281%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%281.22%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.5%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.7%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.8%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.10%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.14%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.15%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.16%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.17%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.18%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.19%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%282.48%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%283%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%284%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2%285%29 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.9 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.13 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.19 cpe:/a:cisco:adaptive_security_appliance_software:7.2.1.24 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.6 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.10 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.14 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.18 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.19 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.22 cpe:/a:cisco:adaptive_security_appliance_software:7.2.2.34 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3.1 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3.12 cpe:/a:cisco:adaptive_security_appliance_software:7.2.3.16 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.6 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.9 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.18 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.25 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.27 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.30 cpe:/a:cisco:adaptive_security_appliance_software:7.2.4.33 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.2 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.4 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.7 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.8 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.10 cpe:/a:cisco:adaptive_security_appliance_software:7.2.5.12 cpe:/a:cisco:adaptive_security_appliance_software:8.0 cpe:/a:cisco:adaptive_security_appliance_software:8.0%282%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%283%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%284%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%285%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%285.28%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0%285.31%29 cpe:/a:cisco:adaptive_security_appliance_software:8.0.1.2 cpe:/a:cisco:adaptive_security_appliance_software:8.0.2 cpe:/a:cisco:adaptive_security_appliance_software:8.0.2.11 cpe:/a:cisco:adaptive_security_appliance_software:8.0.2.15 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3.6 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3.12 cpe:/a:cisco:adaptive_security_appliance_software:8.0.3.19 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.3 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.9 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.16 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.23 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.25 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.28 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.31 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.32 cpe:/a:cisco:adaptive_security_appliance_software:8.0.4.33 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.20 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.23 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.25 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.27 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.28 cpe:/a:cisco:adaptive_security_appliance_software:8.0.5.31 cpe:/a:cisco:adaptive_security_appliance_software:8.1 cpe:/a:cisco:adaptive_security_appliance_software:8.1.1 cpe:/a:cisco:adaptive_security_appliance_software:8.1.1.6 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.13 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.15 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.16 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.19 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.23 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.24 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.49 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.50 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.55 cpe:/a:cisco:adaptive_security_appliance_software:8.1.2.56 cpe:/a:cisco:adaptive_security_appliance_software:8.2 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.9 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.10 cpe:/a:cisco:adaptive_security_appliance_software:8.2.2.12

CVE-2015-0760

2015-06-04T06:59:00.067-04:00

2017-01-04T09:56:21.013-05:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:26:59.070-05:00

CISCO 20150602 Cisco Adaptive Security Appliance XAUTH Bypass Vulnerability SECTRACK 1032473 The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.

cpe:/a:cisco:anyconnect_secure_mobility_client:3.1%28.07021%29 cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%28.00048%29 cpe:/a:cisco:anyconnect_secure_mobility_client:4.0%28.00051%29

CVE-2015-0761

2015-06-04T06:59:01.520-04:00

2017-01-04T09:56:16.497-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-02T13:29:19.463-05:00

CISCO 20150602 Cisco AnyConnect Secure Mobility Client Privilege Escalation Vulnerability BID 74954 SECTRACK 1032472 Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.

cpe:/a:cisco:unified_meetingplace:8.6%281.2%29 cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0762

2015-06-04T06:59:02.707-04:00

2017-01-04T09:56:12.933-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:31:00.930-05:00

CISCO 20150602 Cisco Unified MeetingPlace Microsoft Outlook Reflected Cross-Site Scripting Vulnerability SECTRACK 1032470 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400.

cpe:/a:cisco:unified_meetingplace:8.6%281.2%29

CVE-2015-0763

2015-06-04T06:59:03.800-04:00

2017-01-04T09:52:30.947-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:30:20.347-05:00

CISCO 20150602 Cisco Unified MeetingPlace Session ID Information Disclosure Vulnerability SECTRACK 1032471 Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338.

cpe:/a:cisco:unified_meetingplace:8.6%281.9%29

CVE-2015-0764

2015-06-04T06:59:04.833-04:00

2017-01-04T09:52:26.790-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:27:21.323-05:00

CISCO 20150603 Cisco Unified MeetingPlace Arbitrary File Download Vulnerability SECTRACK 1032481 Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603.

cpe:/o:cisco:ons_15454_system_software:10.30 cpe:/o:cisco:ons_15454_system_software:10.301

CVE-2015-0765

2015-06-04T06:59:05.957-04:00

2017-01-04T10:53:20.780-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-02T13:25:02.240-05:00

CISCO 20150603 Cisco ONS 15454 System Software Denial of Service Vulnerability SECTRACK 1032483 Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service (tNetTask CPU consumption or card reset) via a flood of (1) IP or (2) Ethernet traffic, aka Bug ID CSCus57263.

cpe:/a:cisco:firesight_system_software:6.0.0

CVE-2015-0766

2015-06-04T06:59:06.863-04:00

2017-01-04T11:14:37.080-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:29:58.860-05:00

CISCO 20150603 Cisco FireSIGHT Management Center XSS and HTML Injection Vulnerabilities SECTRACK 1032482 Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196.

cpe:/o:cisco:edge_340_firmware:1.0.0 cpe:/o:cisco:edge_340_firmware:1.1.0

CVE-2015-0767

2015-06-07T14:59:04.577-04:00

2015-06-08T14:22:12.593-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-06-08T12:37:42.437-04:00

ALLOWS_ADMIN_ACCESS

CISCO 20150605 Cisco Edge 340 Privilege Escalation Vulnerability Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CSCur18132.

cpe:/a:cisco:prime_network_control_system:2.1%280.0.85%29 cpe:/a:cisco:prime_network_control_system:2.2%280.0.58%29 cpe:/a:cisco:prime_network_control_system:2.2%280.0.69%29

CVE-2015-0768

2015-06-12T10:59:00.067-04:00

2017-01-04T11:03:14.727-05:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2017-01-02T13:29:00.647-05:00

CISCO 20150609 Cisco Prime Network Control System Unauthorized Configuration Vulnerability SECTRACK 1032541 The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated users to bypass intended access restrictions and execute commands via a login session, aka Bug ID CSCur27371.

cpe:/o:cisco:ios_xr_software:4.0.1 cpe:/o:cisco:ios_xr_software:4.0.2 cpe:/o:cisco:ios_xr_software:4.0.3 cpe:/o:cisco:ios_xr_software:4.0.4 cpe:/o:cisco:ios_xr_software:4.0.11 cpe:/o:cisco:ios_xr_software:4.1.0 cpe:/o:cisco:ios_xr_software:4.1.1 cpe:/o:cisco:ios_xr_software:4.1.2 cpe:/o:cisco:ios_xr_software:4.1_base cpe:/o:cisco:ios_xr_software:4.2.0

CVE-2015-0769

2015-06-12T10:59:01.113-04:00

2017-01-04T11:02:58.647-05:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-01-02T13:26:02.937-05:00

CISCO 20150611 Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability SECTRACK 1032563 Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6 extension headers, aka Bug ID CSCtx03546.

cpe:/a:cisco:telepresence_tc_software:6.3.0 cpe:/a:cisco:telepresence_tc_software:6.3.1 cpe:/a:cisco:telepresence_tc_software:6.3.2 cpe:/a:cisco:telepresence_tc_software:6.3.3 cpe:/a:cisco:telepresence_tc_software:7.1.0 cpe:/a:cisco:telepresence_tc_software:7.1.1 cpe:/a:cisco:telepresence_tc_software:7.1.2 cpe:/a:cisco:telepresence_tc_software:7.1.3 cpe:/a:cisco:telepresence_tc_software:7.1.4 cpe:/a:cisco:telepresence_tc_software:7.2.0 cpe:/a:cisco:telepresence_tc_software:7.2.1 cpe:/a:cisco:telepresence_tc_software:7.3.0 cpe:/a:cisco:telepresence_tc_software:7.3.1 cpe:/a:cisco:telepresence_tc_software:7.3.2

CVE-2015-0770

2015-06-07T14:59:05.470-04:00

2017-01-04T11:03:11.010-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:28:44.693-05:00

CISCO 20150605 Cisco TelePresence SX20 HTTP Response Splitting Vulnerability SECTRACK 1032511 CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.

cpe:/o:cisco:ios:12.2%2833%29sxj8 cpe:/o:cisco:ios:12.2sxj

CVE-2015-0771

2015-06-12T06:59:01.683-04:00

2017-01-04T11:03:03.273-05:00

6.3

NETWORK

MEDIUM

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2017-01-02T13:30:45.740-05:00

CISCO 20150608 Cisco Catalyst 6500 Series Switches IPsec Tunnel Handling Denial of Service Vulnerability SECTRACK 1032517 The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service (device reload) by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505.

cpe:/a:cisco:telepresence_video_communication_server_software:x8.5:rc4

CVE-2015-0772

2015-06-12T10:59:01.957-04:00

2017-01-04T11:03:07.007-05:00

7.1

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

2017-01-02T13:26:18.797-05:00

CISCO 20150609 Cisco TelePresence Video Communication Server SDP Over SIP Denial of Service Vulnerability SECTRACK 1032540 Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device outage) via a crafted SDP parameter-negotiation request in an SDP session during a SIP connection, aka Bug ID CSCut42422.

cpe:/a:cisco:firesight_system_software:5.3.1.1 cpe:/a:cisco:firesight_system_software:6.0.0

CVE-2015-0773

2015-06-12T06:59:02.587-04:00

2017-01-04T11:03:57.017-05:00

5.5

NETWORK

LOW

SINGLE_INSTANCE

NONE

PARTIAL

http://nvd.nist.gov

2017-01-02T13:24:48.347-05:00

CISCO 20150609 Cisco FireSIGHT Management Center Dashboard Deletion Vulnerability SECTRACK 1032542 Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078.

cpe:/a:cisco:application_and_content_networking_system_software:5.5%289%29

CVE-2015-0774

2015-06-12T06:59:03.587-04:00

2017-01-04T11:06:05.377-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-01-02T13:27:36.950-05:00

CISCO 20150609 Cisco Application and Content Networking System URL Page Return Cross-Site Scripting Vulnerability SECTRACK 1032539 Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu70650.

cpe:/h:cisco:nexus_1000v:- cpe:/o:cisco:mds_9000_nx-os:6.2%2811%29 cpe:/o:cisco:nx-os:4.1%282%29e1%281f%29 cpe:/o:cisco:nx-os:6.0%282%29n2%282%29 cpe:/o:cisco:nx-os:6.2%2812%29 cpe:/o:cisco:nx-os:7.2%280%29zn%2899.67%29

CVE-2015-0775

2015-06-12T10:59:02.770-04:00

2017-01-04T11:06:09.677-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-02T13:29:39.797-05:00

CISCO 20150610 Cisco Nexus and Cisco Multilayer Director Switches MOTD Telnet Login Reset Vulnerability SECTRACK 1032561 SECTRACK 1032562 The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12) on Nexus 7000 devices, 7.0(3) on Nexus 9000 devices, and 7.2(0)ZN(99.67) on Nexus 3000 devices allows remote attackers to cause a denial of service (login process reset) via an unspecified terminal-session request during TELNET session setup, aka Bug IDs CSCuo10554, CSCuu75466, CSCuu75471, CSCuu75484, CSCuu75498, CSCuu77170, and CSCuu77182.

cpe:/o:cisco:ios_xr:5.0.1

CVE-2015-0776

2015-06-12T10:59:03.647-04:00

2017-01-04T11:06:12.927-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-01-02T13:31:09.010-05:00

CISCO 20150610 Cisco IOS XR telnetd Packet Processing Denial of Service Vulnerability SECTRACK 1032560 telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (device reload) via a malformed TELNET packet, aka Bug ID CSCuq31566.

cpe:/o:xen:xen:3.4.0 cpe:/o:xen:xen:3.4.1 cpe:/o:xen:xen:3.4.2 cpe:/o:xen:xen:3.4.3 cpe:/o:xen:xen:3.4.4

CVE-2015-0777

2015-04-05T17:59:00.077-04:00

2016-12-07T22:06:58.617-05:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE SUSE-SU-2015:0658 SUSE SUSE-SU-2015:1478 SUSE SUSE-SU-2015:1592 SUSE SUSE-SU-2015:1611 BID 73921 CONFIRM https://bugzilla.novell.com/show_bug.cgi?id=917830 drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.

cpe:/a:suse:opensuse_osc:0.150 cpe:/o:fedoraproject:fedora:20 cpe:/o:fedoraproject:fedora:21 cpe:/o:fedoraproject:fedora:22 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0778

2015-03-16T10:59:01.127-04:00

2018-10-30T12:27:35.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FEDORA-2015-4549 FEDORA FEDORA-2015-4482 FEDORA FEDORA-2015-4687 SUSE openSUSE-SU-2015:0486 SUSE SUSE-SU-2015:0487 BID 73114 CONFIRM https://bugzilla.suse.com/show_bug.cgi?id=901643 GENTOO GLSA-201603-02 osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a _service file.

cpe:/a:novell:zenworks_configuration_management:11 cpe:/a:novell:zenworks_configuration_management:11:sp1 cpe:/a:novell:zenworks_configuration_management:11.2 cpe:/a:novell:zenworks_configuration_management:11.2.1 cpe:/a:novell:zenworks_configuration_management:11.2.2 cpe:/a:novell:zenworks_configuration_management:11.2.3

CVE-2015-0779

2015-06-07T19:59:04.487-04:00

2015-06-08T14:40:47.340-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-06-08T09:12:20.727-04:00

FULLDISC 20150407 [CVE-2015-0779]: Novell ZenWorks Configuration Management remote code execution MISC https://github.com/rapid7/metasploit-framework/pull/5096 MISC https://raw.githubusercontent.com/pedrib/PoC/master/generic/zenworks_zcm_rce.txt EXPLOIT-DB 36964 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016419 Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0780

2017-08-09T14:29:00.607-04:00

2017-08-18T08:18:34.443-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-08-17T14:54:50.860-04:00

BID 74284 SECTRACK 1032166 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-147 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0781

2017-08-09T14:29:00.653-04:00

2017-08-18T07:57:19.673-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-08-17T15:13:58.940-04:00

BID 74291 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-151 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0782

2017-08-09T14:29:00.683-04:00

2017-08-18T08:55:23.213-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2017-08-17T15:12:07.513-04:00

BID 72808 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-148 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0783

2017-08-09T14:29:00.713-04:00

2017-08-19T10:01:33.293-04:00

4.0

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

NONE

http://nvd.nist.gov

2017-08-18T15:55:46.497-04:00

SECTRACK 1032166 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-150 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0784

2017-08-09T14:29:00.760-04:00

2017-08-18T08:55:45.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-08-17T16:24:37.283-04:00

BID 74289 SECTRACK 1032166 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-149 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0785

2017-08-09T14:29:00.807-04:00

2017-08-18T08:56:00.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2017-08-17T16:22:26.593-04:00

BID 74288 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-152 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.

cpe:/a:novell:zenworks_configuration_management:-

CVE-2015-0786

2017-08-09T14:29:00.840-04:00

2017-08-18T09:24:23.173-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2017-08-17T16:21:24.277-04:00

BID 74290 SECTRACK 1032166 MISC http://www.zerodayinitiative.com/advisories/ZDI-15-153 CONFIRM https://www.novell.com/support/kb/doc.php?id=7016431 Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.

cpe:/a:netiq:identity_manager:4.5.2

CVE-2015-0787

2016-10-27T16:59:00.180-04:00

2018-09-27T17:29:48.927-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov

2018-09-26T14:56:50.720-04:00

BID 93972 CONFIRM https://download.novell.com/Download?buildid=QgHXVOxv310~ XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of the forgotUser.do CGI.

CVE-2015-0788

2017-05-11T10:29:44.373-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0789

2017-05-11T10:29:44.390-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0790

2017-05-11T10:29:44.403-04:00

2017-05-11T10:29:44.420-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0791

2017-05-11T10:29:44.437-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0792

2017-05-11T10:29:44.450-04:00

2017-05-11T10:29:44.467-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

CVE-2015-0793

2017-05-11T10:29:44.483-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015. Notes: none.

cpe:/a:dracut_project:dracut cpe:/o:opensuse:opensuse:13.2

CVE-2015-0794

2015-11-19T15:59:02.847-05:00

2018-10-30T12:27:35.843-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2015-11-20T09:02:14.480-05:00

MLIST [opensuse-bugs] 20150619 [Bug 935338] dracut uses hardcoded /tmp/dracut_block_uuid.map filename - symlink attack MLIST [opensuse-bugs] 20150619 [Bug 935338] VUL-0: CVE-2015-0794: dracut: uses hardcoded /tmp/dracut_block_uuid.map filename - symlink attack SUSE openSUSE-SU-2015:2022 modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.

cpe:/a:netiq:security_solutions_for_iseries:8.1

CVE-2015-0795

2015-07-18T06:59:00.087-04:00

2015-07-21T06:55:45.533-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

2015-07-20T15:27:12.613-04:00

MISC http://www.zerodayinitiative.com/advisories/ZDI-15-340/ CONFIRM https://www.netiq.com/support/kb/doc.php?id=7016656 Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699.

CVE-2015-0796

2018-03-02T15:29:00.207-05:00

2019-10-09T19:12:58.687-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM https://bugzilla.suse.com/show_bug.cgi?id=941099 CONFIRM https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc0b1cc90b0097fc In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.

cpe:/a:gstreamer:gstreamer:1.4.4 cpe:/a:mozilla:firefox:37.0.2 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.0 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.3.0 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:firefox_esr:31.5.1 cpe:/a:mozilla:firefox_esr:31.5.2 cpe:/a:mozilla:firefox_esr:31.5.3 cpe:/a:mozilla:firefox_esr:31.6.0 cpe:/a:mozilla:thunderbird:31.5 cpe:/o:linux:linux_kernel cpe:/o:oracle:solaris:10.0 cpe:/o:oracle:solaris:11.3

CVE-2015-0797

2015-05-14T06:59:00.070-04:00

2017-01-02T21:59:43.097-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE SUSE-SU-2015:0921 SUSE SUSE-SU-2015:0978 REDHAT RHSA-2015:0988 REDHAT RHSA-2015:1012 DEBIAN DSA-3225 DEBIAN DSA-3260 DEBIAN DSA-3264 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-47.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1080995 GENTOO GLSA-201512-07 CONFIRM https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7 GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

cpe:/a:mozilla:firefox:37.0 cpe:/o:oracle:solaris:11.3

CVE-2015-0798

2015-04-08T06:59:00.063-04:00

2016-12-07T08:36:15.370-05:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2016-12-06T23:42:34.630-05:00

CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-43.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1032029 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1147597 GENTOO GLSA-201512-10 The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.

cpe:/a:mozilla:firefox:37.0 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0799

2015-04-08T06:59:01.500-04:00

2018-10-30T12:27:35.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-44.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1032030 UBUNTU USN-2557-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1148328 GENTOO GLSA-201512-10 The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.

cpe:/a:mozilla:firefox:36.0.4

CVE-2015-0800

2015-04-01T06:59:01.503-04:00

2016-10-03T22:02:07.240-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-41.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1110212 The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on Android does not properly generate random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a related issue to CVE-2012-2808.

cpe:/a:mozilla:firefox:36.0.4 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.0 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.3.0 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:firefox_esr:31.5.1 cpe:/a:mozilla:firefox_esr:31.5.2 cpe:/a:mozilla:firefox_esr:31.5.3 cpe:/a:mozilla:thunderbird:31.5

CVE-2015-0801

2015-04-01T06:59:02.643-04:00

2017-01-02T21:59:43.177-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 SUSE SUSE-SU-2015:0704 SUSE openSUSE-SU-2015:0892 SUSE openSUSE-SU-2015:1266 REDHAT RHSA-2015:0766 REDHAT RHSA-2015:0771 DEBIAN DSA-3211 DEBIAN DSA-3212 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-40.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73455 SECTRACK 1031996 SECTRACK 1032000 UBUNTU USN-2550-1 UBUNTU USN-2552-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1146339 GENTOO GLSA-201512-10 Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving anchor navigation, a similar issue to CVE-2015-0818.

cpe:/a:mozilla:firefox:36.0.4 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0802

2015-04-01T06:59:03.787-04:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-42.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1124898 GENTOO GLSA-201512-10 EXPLOIT-DB 37958 Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of a privileged window with an unintended persistence of access to restricted internal methods.

CVE-2015-0803

2015-04-01T06:59:04.800-04:00

2018-10-30T12:27:35.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-39.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1134561 GENTOO GLSA-201512-10 The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.

CVE-2015-0804

2015-04-01T06:59:05.647-04:00

2018-10-30T12:27:35.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-39.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1134560 GENTOO GLSA-201512-10 The HTMLSourceElement::BindToTree function in Mozilla Firefox before 37.0 does not properly constrain a data type after omitting namespace validation during certain tree-binding operations, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document containing a SOURCE element.

CVE-2015-0805

2015-04-01T06:59:06.550-04:00

2018-10-30T12:27:35.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-38.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1135511 GENTOO GLSA-201512-10 The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 makes an incorrect memset call during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors that trigger rendering of 2D graphics content.

CVE-2015-0806

2015-04-01T06:59:07.317-04:00

2018-10-30T12:27:35.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-38.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1099437 GENTOO GLSA-201512-10 The Off Main Thread Compositing (OMTC) implementation in Mozilla Firefox before 37.0 attempts to use memset for a memory region of negative length during interaction with the mozilla::layers::BufferTextureClient::AllocateForSurface function, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.

CVE-2015-0807

2015-04-01T06:59:08.147-04:00

2017-01-02T21:59:43.270-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 SUSE SUSE-SU-2015:0704 SUSE openSUSE-SU-2015:0892 SUSE openSUSE-SU-2015:1266 REDHAT RHSA-2015:0766 REDHAT RHSA-2015:0771 DEBIAN DSA-3211 DEBIAN DSA-3212 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-37.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73457 SECTRACK 1031996 SECTRACK 1032000 UBUNTU USN-2550-1 UBUNTU USN-2552-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1111834 GENTOO GLSA-201512-10 The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS access-control checks and conduct cross-site request forgery (CSRF) attacks via a crafted web site, a similar issue to CVE-2014-8638.

CVE-2015-0808

2015-04-01T06:59:09.003-04:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-36.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1109552 GENTOO GLSA-201512-10 The webrtc::VPMContentAnalysis::Release function in the WebRTC implementation in Mozilla Firefox before 37.0 uses incompatible approaches to the deallocation of memory for simple-type arrays, which might allow remote attackers to cause a denial of service (memory corruption) via unspecified vectors.

cpe:/a:mozilla:firefox:36.0.4

CVE-2015-0810

2015-04-01T06:59:09.863-04:00

2016-12-06T22:02:20.887-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-35.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1125013 GENTOO GLSA-201512-10 Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element.

CVE-2015-0811

2015-04-01T06:59:10.723-04:00

2018-10-30T12:27:35.843-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-34.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1132468 GENTOO GLSA-201512-10 The QCMS implementation in Mozilla Firefox before 37.0 allows remote attackers to obtain sensitive information from process heap memory or cause a denial of service (out-of-bounds read) via an image that is improperly handled during transformation.

CVE-2015-0812

2015-04-01T06:59:11.490-04:00

2018-10-30T12:27:35.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-32.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1128126 GENTOO GLSA-201512-10 Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations, which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.

cpe:/a:mozilla:firefox:36.0.4 cpe:/a:mozilla:firefox_esr:31.5.3 cpe:/a:mozilla:thunderbird:31.5

CVE-2015-0813

2015-04-01T06:59:12.303-04:00

2017-01-02T21:59:43.333-05:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 SUSE SUSE-SU-2015:0704 SUSE openSUSE-SU-2015:0892 SUSE openSUSE-SU-2015:1266 REDHAT RHSA-2015:0766 REDHAT RHSA-2015:0771 DEBIAN DSA-3211 DEBIAN DSA-3212 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-31.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73463 SECTRACK 1031996 SECTRACK 1032000 UBUNTU USN-2550-1 UBUNTU USN-2552-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1106596 GENTOO GLSA-201512-10 Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux, when the Fluendo MP3 plugin for GStreamer is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.

cpe:/a:mozilla:firefox:36.0.4

CVE-2015-0814

2015-04-01T06:59:13.100-04:00

2016-12-06T22:02:25.137-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 SUSE SUSE-SU-2015:0704 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-30.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html SECTRACK 1031996 SECTRACK 1032000 UBUNTU USN-2550-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1005991 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1111327 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1116306 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1127012 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1130150 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1132342 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1133909 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1136397 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1137624 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1138391 GENTOO GLSA-201512-10 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

cpe:/a:mozilla:firefox:36.0.4 cpe:/a:mozilla:firefox_esr:31.5.3 cpe:/a:mozilla:thunderbird:31.5

CVE-2015-0815

2015-04-01T06:59:13.957-04:00

2017-01-02T21:59:43.410-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 SUSE SUSE-SU-2015:0704 SUSE openSUSE-SU-2015:0892 SUSE openSUSE-SU-2015:1266 REDHAT RHSA-2015:0766 REDHAT RHSA-2015:0771 DEBIAN DSA-3211 DEBIAN DSA-3212 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-30.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73466 SECTRACK 1031996 SECTRACK 1032000 UBUNTU USN-2550-1 UBUNTU USN-2552-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1036515 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1137326 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1138199 GENTOO GLSA-201512-10 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

cpe:/a:mozilla:firefox:36.0.4 cpe:/a:mozilla:firefox_esr:31.5.3 cpe:/a:mozilla:thunderbird:31.5

CVE-2015-0816

2015-04-01T06:59:14.910-04:00

2017-09-16T21:29:01.170-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0677 SUSE SUSE-SU-2015:0704 SUSE openSUSE-SU-2015:0892 SUSE openSUSE-SU-2015:1266 REDHAT RHSA-2015:0766 REDHAT RHSA-2015:0771 DEBIAN DSA-3211 DEBIAN DSA-3212 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-33.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73461 SECTRACK 1031996 SECTRACK 1032000 UBUNTU USN-2550-1 UBUNTU USN-2552-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1144991 GENTOO GLSA-201512-10 EXPLOIT-DB 37958 Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy, as demonstrated by the resource: URL associated with PDF.js.

cpe:/a:mozilla:firefox:36.0.1 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.0 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.3.0 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:firefox_esr:31.5.1 cpe:/a:mozilla:seamonkey:2.33.0

CVE-2015-0817

2015-03-23T20:59:05.843-04:00

2017-01-02T21:59:43.567-05:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0567 SUSE SUSE-SU-2015:0593 SUSE SUSE-SU-2015:0630 SUSE openSUSE-SU-2015:0636 REDHAT RHSA-2015:0718 DEBIAN DSA-3201 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-29.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73263 SECTRACK 1031958 UBUNTU USN-2538-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1145255 GENTOO GLSA-201504-01 The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ESR 31.x before 31.5.2, and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access, which allows remote attackers to read or write to unintended memory locations, and consequently execute arbitrary code, via crafted JavaScript.

cpe:/a:mozilla:firefox:36.0.3 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.0 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.3.0 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:firefox_esr:31.5.1 cpe:/a:mozilla:firefox_esr:31.5.2 cpe:/a:mozilla:seamonkey:2.33.0

CVE-2015-0818

2015-03-23T20:59:07.250-04:00

2016-12-21T21:59:27.597-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0567 SUSE SUSE-SU-2015:0593 SUSE SUSE-SU-2015:0630 SUSE openSUSE-SU-2015:0636 REDHAT RHSA-2015:0718 DEBIAN DSA-3201 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-28.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 73265 SECTRACK 1031959 UBUNTU USN-2538-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1144988 GENTOO GLSA-201504-01 Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and SeaMonkey before 2.33.1 allow remote attackers to bypass the Same Origin Policy and execute arbitrary JavaScript code with chrome privileges via vectors involving SVG hash navigation.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0819

2015-02-25T06:59:00.047-05:00

2018-10-30T12:27:35.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-26.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72759 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1079554 GENTOO GLSA-201504-01 The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to conduct spoofing and clickjacking attacks by leveraging access to a UI Tour web site.

CVE-2015-0820

2015-02-25T06:59:01.267-05:00

2018-10-30T12:27:35.843-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-27.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72757 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1125389 GENTOO GLSA-201504-01 Mozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a non-extensible state to an extensible state, which allows remote attackers to bypass a Caja Compiler sandbox protection mechanism or a Secure EcmaScript sandbox protection mechanism via a crafted web site.

CVE-2015-0821

2015-02-25T06:59:02.360-05:00

2018-10-30T12:27:35.843-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-25.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72758 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1111960 GENTOO GLSA-201504-01 Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site that is accessed with unspecified mouse and keyboard actions.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:thunderbird:31.0 cpe:/a:mozilla:thunderbird:31.1.2 cpe:/a:mozilla:thunderbird:31.2 cpe:/a:mozilla:thunderbird:31.3 cpe:/a:mozilla:thunderbird:31.4

CVE-2015-0822

2015-02-25T06:59:03.437-05:00

2016-12-23T21:59:05.790-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE SUSE-SU-2015:0412 SUSE SUSE-SU-2015:0446 SUSE SUSE-SU-2015:0447 SUSE openSUSE-SU-2015:0448 SUSE openSUSE-SU-2015:0567 SUSE openSUSE-SU-2015:1266 SUSE openSUSE-SU-2015:0570 REDHAT RHSA-2015:0265 REDHAT RHSA-2015:0266 REDHAT RHSA-2015:0642 DEBIAN DSA-3174 DEBIAN DSA-3179 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-24.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 72756 SECTRACK 1031791 SECTRACK 1031792 UBUNTU USN-2505-1 UBUNTU USN-2506-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1110557 GENTOO GLSA-201504-01 The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/a:opentype_sanitiser_project:opentype_sanitiser cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0823

2015-02-25T06:59:04.377-05:00

2018-10-30T12:27:35.843-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-23.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72754 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1098497 CONFIRM https://github.com/khaledhosny/ots/commit/003c62d28ae438aa8943cb31535563397f838a2c GENTOO GLSA-201504-01 Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the ots::ots_gasp_parse function.

CVE-2015-0824

2015-02-25T06:59:05.203-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-22.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72753 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1095925 GENTOO GLSA-201504-01 The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash) via vectors that trigger use of DrawTarget and the Cairo library for image drawing.

CVE-2015-0825

2015-02-25T06:59:06.110-05:00

2018-10-30T12:27:35.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-21.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72751 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1092370 GENTOO GLSA-201504-01 Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed MP3 file that improperly interacts with memory allocation during playback.

CVE-2015-0826

2015-02-25T06:59:07.047-05:00

2018-10-30T12:27:35.843-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-20.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72750 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1092363 GENTOO GLSA-201504-01 The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap memory) via a crafted Cascading Style Sheets (CSS) token sequence that triggers a restyle or reflow operation.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:thunderbird:31.0 cpe:/a:mozilla:thunderbird:31.1.2 cpe:/a:mozilla:thunderbird:31.2 cpe:/a:mozilla:thunderbird:31.3 cpe:/a:mozilla:thunderbird:31.4

CVE-2015-0827

2015-02-25T06:59:08.063-05:00

2016-12-23T21:59:05.917-05:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE SUSE-SU-2015:0412 SUSE SUSE-SU-2015:0446 SUSE SUSE-SU-2015:0447 SUSE openSUSE-SU-2015:0448 SUSE openSUSE-SU-2015:0567 SUSE openSUSE-SU-2015:1266 SUSE openSUSE-SU-2015:0570 REDHAT RHSA-2015:0265 REDHAT RHSA-2015:0266 REDHAT RHSA-2015:0642 DEBIAN DSA-3174 DEBIAN DSA-3179 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-19.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 72755 SECTRACK 1031791 SECTRACK 1031792 UBUNTU USN-2505-1 UBUNTU USN-2506-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1117304 GENTOO GLSA-201504-01 Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2 cpe:/o:oracle:solaris:11.3

CVE-2015-0828

2015-02-25T06:59:08.907-05:00

2018-10-30T12:27:35.843-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-18.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72744 SECTRACK 1031791 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1030667 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=988675 GENTOO GLSA-201504-01 Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.

CVE-2015-0829

2015-02-25T06:59:10.017-05:00

2018-10-30T12:27:35.843-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-17.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72741 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1128939 GENTOO GLSA-201504-01 Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.

CVE-2015-0830

2015-02-25T06:59:10.937-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-14.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72745 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1110488 GENTOO GLSA-201504-01 The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service (application crash) via crafted WebGL content.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:thunderbird:31.0 cpe:/a:mozilla:thunderbird:31.1.2 cpe:/a:mozilla:thunderbird:31.2 cpe:/a:mozilla:thunderbird:31.3 cpe:/a:mozilla:thunderbird:31.4 cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ cpe:/o:canonical:ubuntu_linux:14.10 cpe:/o:redhat:enterprise_linux:5 cpe:/o:redhat:enterprise_linux:6.0

CVE-2015-0831

2015-02-25T06:59:11.780-05:00

2019-04-22T13:48:00.643-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE SUSE-SU-2015:0412 SUSE SUSE-SU-2015:0446 SUSE SUSE-SU-2015:0447 SUSE openSUSE-SU-2015:0448 SUSE openSUSE-SU-2015:0567 SUSE openSUSE-SU-2015:1266 SUSE openSUSE-SU-2015:0570 REDHAT RHSA-2015:0265 REDHAT RHSA-2015:0266 REDHAT RHSA-2015:0642 DEBIAN DSA-3174 DEBIAN DSA-3179 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-16.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html BID 72746 SECTRACK 1031791 SECTRACK 1031792 UBUNTU USN-2505-1 UBUNTU USN-2506-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1130541 GENTOO GLSA-201504-01 Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.

CVE-2015-0832

2015-02-25T06:59:12.720-05:00

2018-10-30T12:27:35.843-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-13.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72752 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1065909 GENTOO GLSA-201504-01 Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.

cpe:/a:mozilla:firefox:0.1 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.4.1 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.10 cpe:/a:mozilla:firefox:3.0.11 cpe:/a:mozilla:firefox:3.0.12 cpe:/a:mozilla:firefox:3.0.13 cpe:/a:mozilla:firefox:3.0.14 cpe:/a:mozilla:firefox:3.0.15 cpe:/a:mozilla:firefox:3.0.16 cpe:/a:mozilla:firefox:3.0.17 cpe:/a:mozilla:firefox:3.0.18 cpe:/a:mozilla:firefox:3.0.19 cpe:/a:mozilla:firefox:3.5 cpe:/a:mozilla:firefox:3.5.1 cpe:/a:mozilla:firefox:3.5.2 cpe:/a:mozilla:firefox:3.5.3 cpe:/a:mozilla:firefox:3.5.4 cpe:/a:mozilla:firefox:3.5.5 cpe:/a:mozilla:firefox:3.5.6 cpe:/a:mozilla:firefox:3.5.7 cpe:/a:mozilla:firefox:3.5.8 cpe:/a:mozilla:firefox:3.5.9 cpe:/a:mozilla:firefox:3.5.10 cpe:/a:mozilla:firefox:3.5.11 cpe:/a:mozilla:firefox:3.5.12 cpe:/a:mozilla:firefox:3.5.13 cpe:/a:mozilla:firefox:3.5.14 cpe:/a:mozilla:firefox:3.5.15 cpe:/a:mozilla:firefox:3.5.16 cpe:/a:mozilla:firefox:3.5.17 cpe:/a:mozilla:firefox:3.5.18 cpe:/a:mozilla:firefox:3.5.19 cpe:/a:mozilla:firefox:3.6 cpe:/a:mozilla:firefox:3.6.2 cpe:/a:mozilla:firefox:3.6.3 cpe:/a:mozilla:firefox:3.6.4 cpe:/a:mozilla:firefox:3.6.6 cpe:/a:mozilla:firefox:3.6.7 cpe:/a:mozilla:firefox:3.6.8 cpe:/a:mozilla:firefox:3.6.9 cpe:/a:mozilla:firefox:3.6.10 cpe:/a:mozilla:firefox:3.6.11 cpe:/a:mozilla:firefox:3.6.12 cpe:/a:mozilla:firefox:3.6.13 cpe:/a:mozilla:firefox:3.6.14 cpe:/a:mozilla:firefox:3.6.15 cpe:/a:mozilla:firefox:3.6.16 cpe:/a:mozilla:firefox:3.6.17 cpe:/a:mozilla:firefox:3.6.18 cpe:/a:mozilla:firefox:3.6.19 cpe:/a:mozilla:firefox:3.6.20 cpe:/a:mozilla:firefox:3.6.21 cpe:/a:mozilla:firefox:3.6.22 cpe:/a:mozilla:firefox:3.6.23 cpe:/a:mozilla:firefox:3.6.24 cpe:/a:mozilla:firefox:3.6.25 cpe:/a:mozilla:firefox:3.6.26 cpe:/a:mozilla:firefox:3.6.27 cpe:/a:mozilla:firefox:3.6.28 cpe:/a:mozilla:firefox:4.0 cpe:/a:mozilla:firefox:4.0:beta1 cpe:/a:mozilla:firefox:4.0:beta10 cpe:/a:mozilla:firefox:4.0:beta11 cpe:/a:mozilla:firefox:4.0:beta12 cpe:/a:mozilla:firefox:4.0:beta2 cpe:/a:mozilla:firefox:4.0:beta3 cpe:/a:mozilla:firefox:4.0:beta4 cpe:/a:mozilla:firefox:4.0:beta5 cpe:/a:mozilla:firefox:4.0:beta6 cpe:/a:mozilla:firefox:4.0:beta7 cpe:/a:mozilla:firefox:4.0:beta8 cpe:/a:mozilla:firefox:4.0:beta9 cpe:/a:mozilla:firefox:4.0.1 cpe:/a:mozilla:firefox:5.0 cpe:/a:mozilla:firefox:5.0.1 cpe:/a:mozilla:firefox:6.0 cpe:/a:mozilla:firefox:6.0.1 cpe:/a:mozilla:firefox:6.0.2 cpe:/a:mozilla:firefox:7.0 cpe:/a:mozilla:firefox:7.0.1 cpe:/a:mozilla:firefox:8.0 cpe:/a:mozilla:firefox:8.0.1 cpe:/a:mozilla:firefox:9.0 cpe:/a:mozilla:firefox:9.0.1 cpe:/a:mozilla:firefox:10.0 cpe:/a:mozilla:firefox:10.0.1 cpe:/a:mozilla:firefox:10.0.2 cpe:/a:mozilla:firefox:10.0.3 cpe:/a:mozilla:firefox:10.0.4 cpe:/a:mozilla:firefox:10.0.5 cpe:/a:mozilla:firefox:10.0.6 cpe:/a:mozilla:firefox:10.0.7 cpe:/a:mozilla:firefox:10.0.8 cpe:/a:mozilla:firefox:10.0.9 cpe:/a:mozilla:firefox:10.0.10 cpe:/a:mozilla:firefox:10.0.11 cpe:/a:mozilla:firefox:10.0.12 cpe:/a:mozilla:firefox:11.0 cpe:/a:mozilla:firefox:12.0 cpe:/a:mozilla:firefox:12.0:beta6 cpe:/a:mozilla:firefox:13.0 cpe:/a:mozilla:firefox:13.0.1 cpe:/a:mozilla:firefox:14.0 cpe:/a:mozilla:firefox:14.0.1 cpe:/a:mozilla:firefox:15.0 cpe:/a:mozilla:firefox:15.0.1 cpe:/a:mozilla:firefox:16.0 cpe:/a:mozilla:firefox:16.0.1 cpe:/a:mozilla:firefox:16.0.2 cpe:/a:mozilla:firefox:17.0 cpe:/a:mozilla:firefox:17.0.1 cpe:/a:mozilla:firefox:17.0.2 cpe:/a:mozilla:firefox:17.0.3 cpe:/a:mozilla:firefox:17.0.4 cpe:/a:mozilla:firefox:17.0.5 cpe:/a:mozilla:firefox:17.0.6 cpe:/a:mozilla:firefox:17.0.7 cpe:/a:mozilla:firefox:17.0.8 cpe:/a:mozilla:firefox:17.0.9 cpe:/a:mozilla:firefox:17.0.10 cpe:/a:mozilla:firefox:17.0.11 cpe:/a:mozilla:firefox:18.0 cpe:/a:mozilla:firefox:18.0.1 cpe:/a:mozilla:firefox:18.0.2 cpe:/a:mozilla:firefox:19.0 cpe:/a:mozilla:firefox:19.0.1 cpe:/a:mozilla:firefox:19.0.2 cpe:/a:mozilla:firefox:20.0 cpe:/a:mozilla:firefox:20.0.1 cpe:/a:mozilla:firefox:21.0 cpe:/a:mozilla:firefox:22.0 cpe:/a:mozilla:firefox:23.0 cpe:/a:mozilla:firefox:23.0.1 cpe:/a:mozilla:firefox:24.0 cpe:/a:mozilla:firefox:24.1 cpe:/a:mozilla:firefox:24.1.1 cpe:/a:mozilla:firefox:25.0 cpe:/a:mozilla:firefox:25.0.1 cpe:/a:mozilla:firefox:26.0 cpe:/a:mozilla:firefox:27.0 cpe:/a:mozilla:firefox:27.0.1 cpe:/a:mozilla:firefox:28.0 cpe:/a:mozilla:firefox:29.0 cpe:/a:mozilla:firefox:29.0.1 cpe:/a:mozilla:firefox:30.0 cpe:/a:mozilla:firefox:31.0 cpe:/a:mozilla:firefox:31.1.0 cpe:/a:mozilla:firefox:32.0 cpe:/a:mozilla:firefox:33.0 cpe:/a:mozilla:firefox:34.0.5 cpe:/a:mozilla:firefox:35.0.1 cpe:/a:mozilla:firefox_esr:31.0 cpe:/a:mozilla:firefox_esr:31.1 cpe:/a:mozilla:firefox_esr:31.1.1 cpe:/a:mozilla:firefox_esr:31.2 cpe:/a:mozilla:firefox_esr:31.3 cpe:/a:mozilla:firefox_esr:31.4 cpe:/a:mozilla:firefox_esr:31.5 cpe:/a:mozilla:thunderbird:31.0 cpe:/a:mozilla:thunderbird:31.1.2 cpe:/a:mozilla:thunderbird:31.2 cpe:/a:mozilla:thunderbird:31.3 cpe:/a:mozilla:thunderbird:31.4 cpe:/o:opensuse:evergreen:11.4 cpe:/o:opensuse:opensuse:13.1 cpe:/o:opensuse:opensuse:13.2

CVE-2015-0833

2015-02-25T06:59:13.673-05:00

2018-10-30T12:27:35.843-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0567 SUSE openSUSE-SU-2015:1266 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-12.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72747 SECTRACK 1031791 SECTRACK 1031792 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=945192 GENTOO GLSA-201504-01 Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.

CVE-2015-0834

2015-02-25T06:59:14.563-05:00

2018-10-30T12:27:35.843-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-15.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72743 SECTRACK 1031791 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1098314 GENTOO GLSA-201504-01 The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.

CVE-2015-0835

2015-02-25T06:59:15.407-05:00

2016-12-21T21:59:29.330-05:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SUSE openSUSE-SU-2015:0404 SUSE SUSE-SU-2015:0412 SUSE SUSE-SU-2015:0446 SUSE SUSE-SU-2015:0447 SUSE openSUSE-SU-2015:0570 CONFIRM http://www.mozilla.org/security/announce/2015/mfsa2015-11.html CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html BID 72748 SECTRACK 1031791 SECTRACK 1031792 UBUNTU USN-2505-1 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1072760 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1092947 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1114058 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1114569 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1118894 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1119019 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1122387 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1125734 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1127206 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=1127246 GENTOO GLSA-201504-01 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.