CVE Vulnerability Catalog

IBM Domino versions 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 are vulnerable to remote attacks that can lead to arbitrary code execution or application crash via a crafted GIF image.

A vulnerability in the Simple Ads Manager plugin before version 2.5.96 for WordPress allows remote attackers to upload files with executable extensions, leading to arbitrary code execution.

Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDragon before version 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. (dot dot) in the QUERY_STRING to cfchart.cfchart.

CVE-2015-0702 describes an unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9). This allows remote authenticated users to execute arbitrary code by uploading a file that provides shell access.

The NaClSandbox::InitializeLayerTwoSandbox function in Google Chrome before version 42.0.2311.90 lacks RLIMIT_AS and RLIMIT_DATA limits for Native Client processes, which may make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impacts by leveraging the ability to run a crafted program in the NaCl sandbox.

Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Multiple unspecified vulnerabilities in Google Chrome before version 42.0.2311.90 may allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

The ReduceTransitionElementsKind function in Google V8 before version 4.2.77.8, as used in Google Chrome before version 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages 'type confusion' in the check-elimination optimization.

Skia, as used in Google Chrome before version 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in Google Chrome before version 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.

CVE-2015-0970 is a CSRF vulnerability in SearchBlox before version 8.2 that allows remote attackers to hijack the authentication of arbitrary users.

In SearchBlox before version 8.2, there is an unrestricted file upload vulnerability in admin/uploadImage.html that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type.

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container).

CVE-2015-0845 describes a format string vulnerability in Movable Type Pro, Open Source, and Advanced before version 5.2.13 and Pro and Advanced 6.0.x before version 6.0.8, allowing remote attackers to execute arbitrary code via vectors related to localization of templates.

Cisco IOS XR versions 4.3.4 through 5.3.0 on ASR 9000 devices have an issue with handling bridge-group virtual interface (BVI) traffic when uRPF, PBR, QoS, or an ACL is configured. This can allow remote attackers to cause a denial of service by triggering chip and card hangs and reloads.

A JAR file in Cisco Secure Desktop (CSD) allows remote attackers to execute arbitrary commands via a crafted website.

Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain privileges via unknown vectors.

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap.

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Accounting commands.