CVE-2015-6273Les appareils Cisco ASR 1000 utilisant IOS XE (versions antérieures à 3.1.2S) sont susceptibles de subir un plantage du processeur de services intégrés (Embedded Services Processor…
7.8 ÉLEVÉE
CVE-2015-6268Les appareils Cisco ASR 1000 utilisant des versions d'IOS XE antérieures à la 2.2.3 sont susceptibles de subir une attaque par déni de service. Un attaquant distant peut provoquer …
7.8 ÉLEVÉE
CVE-2015-6267Les appareils Cisco ASR 1000 exécutant des versions affectées d'IOS XE sont susceptibles de subir un plantage du processeur de services intégrés (Embedded Services Processor). Un a…
7.8 ÉLEVÉE
CVE-2015-1171GSM SIM Utility 6.6 est affecté par une faille de corruption de mémoire qui permet à un attaquant d'exécuter du code arbitraire sur votre système. Cela est possible en incitant le …
10.0 ÉLEVÉE
CVE-2014-9651Les systèmes utilisant des versions de CHICKEN Scheme antérieures à la version 5.0 sont affectés par un dépassement de tampon (buffer overflow) dans les procédures `substring-index…
7.5 ÉLEVÉE
CVE-2015-6266The guest portal in Cisco Identity Services Engine (ISE) 3300 1.2(0.899) does not restrict access to uploaded HTML documents, which allows remote attackers to obtain sensitive info…
5.0 MOYENNE
CVE-2015-2987Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an o…
2.6 FAIBLE
CVE-2015-5368Certains modèles d'ordinateurs portables et de clients légers HP utilisant le module Gobi 4G sont concernés s'ils utilisent un micrologiciel obsolète. Un attaquant non authentifié …
7.8 ÉLEVÉE
CVE-2015-5367The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local user…
6.9 MOYENNE
CVE-2015-6265The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unsp…
4.3 MOYENNE
CVE-2015-5433HP Virtual Connect Enterprise Manager (VCEM) SDK before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obta…
4.0 MOYENNE
CVE-2015-5432Les versions du SDK d'HP Virtual Connect Enterprise Manager (VCEM) antérieures à la 7.5.0 sont concernées. Un attaquant non authentifié disposant d'un accès réseau peut voler à dis…
7.5 ÉLEVÉE
CVE-2015-5431HP Matrix Operating Environment before 7.5.0 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
6.5 MOYENNE
CVE-2015-5430HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information via unspecified vectors.
5.0 MOYENNE
CVE-2015-5429Les versions de HP Matrix Operating Environment antérieures à la 7.5.0 sont vulnérables à une attaque à distance permettant à un tiers de lire ou de modifier des données sensibles.…
7.5 ÉLEVÉE
CVE-2015-5428Les versions de HP Matrix Operating Environment antérieures à la 7.5.0 sont concernées. Un attaquant non authentifié disposant d'un accès réseau peut voler à distance des informati…
7.5 ÉLEVÉE
CVE-2015-5427Les versions de HP Matrix Operating Environment antérieures à la 7.5.0 sont vulnérables à une faille qui permet à un attaquant distant de lire des informations sensibles ou de modi…
7.5 ÉLEVÉE
CVE-2015-5405HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive inf…
6.5 MOYENNE
CVE-2015-5404Les versions de HP Systems Insight Manager (SIM) antérieures à la 7.5.0 sont affectées par une faille qui permet à un attaquant distant de lire des informations sensibles ou de mod…
7.5 ÉLEVÉE
CVE-2015-5403HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive inf…
4.0 MOYENNE
CVE-2015-5402Les versions de HP Systems Insight Manager (SIM) et de HP Matrix Operating Environment antérieures à la version 7.5.0 sont concernées. Un utilisateur local peut exploiter cette fai…
7.2 ÉLEVÉE
CVE-2015-2140HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive inf…
6.5 MOYENNE
CVE-2015-2139HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive inf…
4.0 MOYENNE
CVE-2015-4173Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40…
6.9 MOYENNE
CVE-2015-4037The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation…
1.9 FAIBLE
CVE-2015-3239Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.
3.3 FAIBLE
CVE-2015-3221OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authenticated users to cause a denial of servic…
4.0 MOYENNE
CVE-2015-3158The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, whi…
4.0 MOYENNE
CVE-2013-7424The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free)…
5.1 MOYENNE
CVE-2015-5413HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors.
4.0 MOYENNE
CVE-2015-5412Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspe…
6.0 MOYENNE
CVE-2015-5411HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified vectors.
6.8 MOYENNE
CVE-2015-5410HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors.
6.5 MOYENNE
CVE-2015-5409Les versions de HP Version Control Repository Manager (VCRM) antérieures à la version 7.5.0 sont affectées par un dépassement de tampon (buffer overflow). Un attaquant disposant d'…
7.5 ÉLEVÉE
CVE-2015-6261Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by lever…
4.0 MOYENNE
CVE-2015-5949VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted 3GP file, which triggers the freeing …
6.8 MOYENNE
CVE-2015-5161The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environmen…
6.8 MOYENNE
CVE-2015-4020RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to …
4.3 MOYENNE
CVE-2012-2150xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image.
5.0 MOYENNE
CVE-2015-6262Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentication of arbitrary users, aka B…
6.8 MOYENNE
CVE-2015-5786Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a differen…
6.8 MOYENNE
CVE-2015-5785Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a differen…
6.8 MOYENNE
CVE-2015-3269Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.354169, 4.6.2 before 4.6.2.354169, and 4…
5.0 MOYENNE
CVE-2015-6249The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a t…
4.3 MOYENNE
CVE-2015-6248The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which …
4.3 MOYENNE
CVE-2015-6247The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset val…
4.3 MOYENNE
CVE-2015-6246The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote …
4.3 MOYENNE
CVE-2015-6245epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denia…
4.3 MOYENNE
CVE-2015-6244The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in…
4.3 MOYENNE
CVE-2015-6243The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial o…
4.3 MOYENNE