CVE Vulnerability Catalog

CVE-2015-7393 affects BIG-IP products, including LTM, APM, ASM, and others, allowing local users with advanced shell (bash) access to gain privileges via unspecified vectors.

Idle stream handling in nghttp2 before version 1.6.0 contains a heap-use-after-free bug that can be exploited by attackers in unspecified ways.

The HTTPS fallback implementation in Shell In A Box before version 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the '/plain' URL.

Buffer overflow in the HIFI driver in Huawei P8 phones before specified software versions may lead to system crashes or arbitrary code execution by attackers.

F5 BIG-IP APM versions 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 contain a vulnerability that allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server configured with a remote desktop profile.

There is a heap-based buffer overflow in the HIFI driver in Huawei Mate 7 and P8 phones, which may lead to a denial of service or execution of arbitrary code via a crafted application.

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service via a large websocket payload or HTTP headers section.

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an 'abnormal exit' occurs, allowing remote attackers to conduct replay attacks via the session ID.

Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 are vulnerable to remote attacks that can lead to denial of service via unspecified packets, resulting in device restart.

A memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 can be exploited by remote attackers. Attackers can cause a denial of service by sending a large number of crafted ARP packets.

CVE-2015-6566 vulnerability in Zarafa Collaboration Platform (ZCP) before version 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-* files.

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors.

CSRF vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before version 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites.

A heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before version 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.

Advantech EKI-132x devices with firmware before December 31, 2015, allow remote attackers to bypass authentication via unspecified vectors.

ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.

The initialize method in the Histogram class in the colorscore gem before version 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the image_path, colors, or depth variable.

Buffer overflow in the pcnet_receive function in QEMU when a guest NIC has a larger MTU allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.