CVE List - 2015 / December
Showing 1 - 100 of 565 CVEs for December 2015 (Page 1 of 6)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2015-6385 | 2015-12-01 | The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S... |
| CVE-2015-6386 | 2015-12-01 | The passthrough FTP feature on Cisco Web Security Appliance (WSA)... |
| CVE-2015-8383 | 2015-12-02 | PCRE before 8.38 mishandles certain repeated conditional groups, which allows... |
| CVE-2015-8386 | 2015-12-02 | PCRE before 8.38 mishandles the interaction of lookbehind assertions and... |
| CVE-2015-8387 | 2015-12-02 | PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine... |
| CVE-2015-8389 | 2015-12-02 | PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns,... |
| CVE-2015-8390 | 2015-12-02 | PCRE before 8.38 mishandles the [: and \\ substrings in... |
| CVE-2015-8391 | 2015-12-02 | The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles... |
| CVE-2015-8393 | 2015-12-02 | pcregrep in PCRE before 8.38 mishandles the -q option for... |
| CVE-2015-8394 | 2015-12-02 | PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which... |
| CVE-2015-2327 | 2015-12-02 | PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ pattern and related patterns... |
| CVE-2015-2328 | 2015-12-02 | PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns... |
| CVE-2015-8380 | 2015-12-02 | The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles... |
| CVE-2015-8381 | 2015-12-02 | The compile_regex function in pcre_compile.c in PCRE before 8.38 and... |
| CVE-2015-8382 | 2015-12-02 | The match function in pcre_exec.c in PCRE before 8.37 mishandles... |
| CVE-2015-8384 | 2015-12-02 | PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns... |
| CVE-2015-8385 | 2015-12-02 | PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns... |
| CVE-2015-8388 | 2015-12-02 | PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns... |
| CVE-2015-8392 | 2015-12-02 | PCRE before 8.38 mishandles certain instances of the (?| substring,... |
| CVE-2015-8395 | 2015-12-02 | PCRE before 8.38 mishandles certain references, which allows remote attackers... |
| CVE-2015-8024 | 2015-12-02 | McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM),... |
| CVE-2015-6383 | 2015-12-03 | Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads... |
| CVE-2015-6390 | 2015-12-03 | Cross-site scripting (XSS) vulnerability in the management interface in Cisco... |
| CVE-2015-0859 | 2015-12-03 | The Debian build procedure for the smokeping package in wheezy... |
| CVE-2015-0860 | 2015-12-03 | Off-by-one error in the extracthalf function in dpkg-deb/extract.c in the... |
| CVE-2015-5245 | 2015-12-03 | CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw... |
| CVE-2015-8076 | 2015-12-03 | The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before... |
| CVE-2015-8077 | 2015-12-03 | Integer overflow in the index_urlfetch function in imap/index.c in Cyrus... |
| CVE-2015-8078 | 2015-12-03 | Integer overflow in the index_urlfetch function in imap/index.c in Cyrus... |
| CVE-2015-6384 | 2015-12-05 | The Cisco WebEx Meetings application before 8.5.1 for Android improperly... |
| CVE-2015-6387 | 2015-12-05 | Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS)... |
| CVE-2015-6388 | 2015-12-05 | Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote... |
| CVE-2015-6391 | 2015-12-05 | Cisco Unified SIP 3905 phones allow remote attackers to cause... |
| CVE-2015-6394 | 2015-12-05 | The kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices... |
| CVE-2015-6849 | 2015-12-05 | EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2,... |
| CVE-2015-1794 | 2015-12-06 | The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e... |
| CVE-2015-3193 | 2015-12-06 | The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before... |
| CVE-2015-3194 | 2015-12-06 | crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e... |
| CVE-2015-3195 | 2015-12-06 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0... |
| CVE-2015-3196 | 2015-12-06 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and... |
| CVE-2015-6764 | 2015-12-06 | The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in... |
| CVE-2015-6765 | 2015-12-06 | Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows... |
| CVE-2015-6766 | 2015-12-06 | Use-after-free vulnerability in the AppCache implementation in Google Chrome before... |
| CVE-2015-6767 | 2015-12-06 | Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google... |
| CVE-2015-6768 | 2015-12-06 | The DOM implementation in Google Chrome before 47.0.2526.73 allows remote... |
| CVE-2015-6769 | 2015-12-06 | The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before... |
| CVE-2015-6770 | 2015-12-06 | The DOM implementation in Google Chrome before 47.0.2526.73 allows remote... |
| CVE-2015-6771 | 2015-12-06 | js/array.js in Google V8, as used in Google Chrome before... |
| CVE-2015-6772 | 2015-12-06 | The DOM implementation in Blink, as used in Google Chrome... |
| CVE-2015-6773 | 2015-12-06 | The convolution implementation in Skia, as used in Google Chrome... |
| CVE-2015-6774 | 2015-12-06 | Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the... |
| CVE-2015-6775 | 2015-12-06 | fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73,... |
| CVE-2015-6776 | 2015-12-06 | The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in... |
| CVE-2015-6777 | 2015-12-06 | Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the... |
| CVE-2015-6778 | 2015-12-06 | The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in... |
| CVE-2015-6779 | 2015-12-06 | PDFium, as used in Google Chrome before 47.0.2526.73, does not... |
| CVE-2015-6780 | 2015-12-06 | Use-after-free vulnerability in the Infobars implementation in Google Chrome before... |
| CVE-2015-6781 | 2015-12-06 | Integer overflow in the FontData::Bound function in data/font_data.cc in Google... |
| CVE-2015-6782 | 2015-12-06 | The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73... |
| CVE-2015-6783 | 2015-12-06 | The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker)... |
| CVE-2015-6784 | 2015-12-06 | The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark... |
| CVE-2015-6785 | 2015-12-06 | The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy... |
| CVE-2015-6786 | 2015-12-06 | The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy... |
| CVE-2015-6787 | 2015-12-06 | Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers... |
| CVE-2015-8478 | 2015-12-06 | Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used... |
| CVE-2015-8479 | 2015-12-06 | Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google... |
| CVE-2015-8480 | 2015-12-06 | The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73... |
| CVE-2015-5273 | 2015-12-07 | The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT)... |
| CVE-2015-5287 | 2015-12-07 | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT)... |
| CVE-2015-5302 | 2015-12-07 | libreport 2.0.7 before 2.6.3 only saves changes to the first... |
| CVE-2015-1342 | 2015-12-07 | LXCFS before 0.12 does not properly enforce directory escapes, which... |
| CVE-2015-1344 | 2015-12-07 | The do_write_pids function in lxcfs.c in LXCFS before 0.12 does... |
| CVE-2015-3276 | 2015-12-07 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly... |
| CVE-2015-3628 | 2015-12-07 | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM,... |
| CVE-2015-4334 | 2015-12-07 | The default configuration of SGOS in Blue Coat ProxySG before... |
| CVE-2015-5006 | 2015-12-07 | IBM Java Security Components in IBM SDK, Java Technology Edition... |
| CVE-2015-5309 | 2015-12-07 | Integer overflow in the terminal emulator in PuTTY before 0.66... |
| CVE-2015-7348 | 2015-12-07 | Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier... |
| CVE-2015-8084 | 2015-12-07 | Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with... |
| CVE-2015-8124 | 2015-12-07 | Session fixation vulnerability in the "Remember Me" login feature in... |
| CVE-2015-8125 | 2015-12-07 | Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before... |
| CVE-2015-8131 | 2015-12-07 | Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3... |
| CVE-2015-8213 | 2015-12-07 | The get_format function in utils/formats.py in Django before 1.7.x before... |
| CVE-2015-8482 | 2015-12-07 | Blue Coat Unified Agent before 4.6.2 does not prevent modification... |
| CVE-2015-6616 | 2015-12-08 | mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01... |
| CVE-2015-6617 | 2015-12-08 | Skia, as used in Android before 5.1.1 LMY48Z and 6.0... |
| CVE-2015-6618 | 2015-12-08 | Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows... |
| CVE-2015-6619 | 2015-12-08 | The kernel in Android before 5.1.1 LMY48Z and 6.0 before... |
| CVE-2015-6620 | 2015-12-08 | libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01... |
| CVE-2015-6621 | 2015-12-08 | SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before... |
| CVE-2015-6622 | 2015-12-08 | The Native Frameworks Library in Android before 5.1.1 LMY48Z and... |
| CVE-2015-6623 | 2015-12-08 | Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain... |
| CVE-2015-6624 | 2015-12-08 | System Server in Android 6.0 before 2015-12-01 allows attackers to... |
| CVE-2015-6625 | 2015-12-08 | System Server in Android 6.0 before 2015-12-01 allows attackers to... |
| CVE-2015-6626 | 2015-12-08 | libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01... |
| CVE-2015-6627 | 2015-12-08 | The Audio component in Android before 5.1.1 LMY48Z and 6.0... |
| CVE-2015-6628 | 2015-12-08 | Media Framework in Android before 5.1.1 LMY48Z and 6.0 before... |
| CVE-2015-6629 | 2015-12-08 | Wi-Fi in Android 5.x before 5.1.1 LMY48Z allows attackers to... |
| CVE-2015-6630 | 2015-12-08 | SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before... |
| CVE-2015-6631 | 2015-12-08 | libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01... |