CVE Vulnerability Catalog

CVE-2015-8157 is a SQL injection vulnerability in the Management Server of Symantec Embedded Security products. It allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service through resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake.

Multiple SQL injection vulnerabilities in the scoped_search function in Katello allow remote authenticated users to execute arbitrary SQL commands via the sort_by or sort_order parameter.

In nginx before 1.10.1 and 1.11.x before 1.11.1, a vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.

The CInArchive::ReadFileItem method in 7zip versions 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Apache James Server version 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.

Doctrine Annotations, Cache, Common, ORM, and MongoDB ODM have a vulnerability due to improper permissions for cache directories, allowing local users to execute arbitrary PHP code with elevated privileges.

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.

The service daemon in CRIU creates log and dump files insecurely, allowing local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.

The t42_parse_encoding function in FreeType before version 2.5.4 does not properly update the current position for immediates-only mode, allowing remote attackers to cause a denial of service (infinite loop) via a Type42 font.

Multiple unspecified vulnerabilities in Google Chrome before version 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

The Autofill implementation in Google Chrome before version 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion. This allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.

In Google Chrome before version 51.0.2704.79, there is a vulnerability in runtime_custom_bindings.cc that does not consider side effects during the creation of an array of extension views. This can lead to denial of service (use-after-free) or other unspecified impacts related to extensions.

The FrameLoader::startLoad function in Blink, used in Google Chrome before version 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations. This allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.

The extensions subsystem in Google Chrome before version 51.0.2704.79 does not properly restrict bindings access, allowing remote attackers to bypass the Same Origin Policy via unspecified vectors.

Multiple unspecified vulnerabilities in Google Chrome before version 51.0.2704.63 may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Skia, as used in Google Chrome before version 51.0.2704.63, mishandles coincidence runs, allowing remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves.

The Autofill implementation in Google Chrome before version 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion. This allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted website.

In libxslt before version 1.1.29, used in Google Chrome before version 51.0.2704.63, there is a mishandling of the i format token for xsl:number data. This allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.