deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-6478
Published: 2015-11-13
Description: Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/77571; http://www.zerodayinitiative.com/advisories/ZDI-15-573; http://www.zerodayinitiative.com/advisories/ZDI-15-577
CVE: CVE-2015-7905
Published: 2015-11-13
Description: Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/77571; http://www.zerodayinitiative.com/advisories/ZDI-15-574; http://www.zerodayinitiative.com/advisories/ZDI-15-575
CVE: CVE-2015-8126
Published: 2015-11-13
Description: Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172324.html
CVE: CVE-2013-5229
Published: 2015-11-14
Description: The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box.
CVSS Score: 3.7 (LOW)
CWE: CWE-254
References: http://jvn.jp/en/jp/JVN56210048/741993/index.html; http://jvn.jp/en/jp/JVN56210048/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000177
CVE: CVE-2015-6364
Published: 2015-11-14
Description: Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-vds; http://www.securitytracker.com/id/1034159; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-vds
CVE: CVE-2015-6365
Published: 2015-11-14
Description: Cisco IOS 15.2(04)M and 15.4(03)M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios1; http://www.securitytracker.com/id/1034158; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios1
CVE: CVE-2015-6367
Published: 2015-11-14
Description: Cisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of service (CPU consumption) by improperly establishing many SSHv2 connections, aka Bug ID CSCux13374.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151113-aironet; http://www.securitytracker.com/id/1034157; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151113-aironet
CVE: CVE-2015-7404
Published: 2015-11-14
Description: IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka Spectrum Protect for Databases) 5.5 before 5.5.6.2, 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server (aka Spectrum Protect for Mail) 5.5 before 5.5.1.1, 6.1 and 6.3 before 6.3.1.6, 6.4 before 6.4.1.8, and 7.1 before 7.1.4; and Tivoli Storage FlashCopy Manager for Windows (aka Spectrum Protect Snapshot) 2.x and 3.1 before 3.1.1.6, 3.2 before 3.2.1.8, and 4.1 before 4.1.4, when application tracing is configured, write cleartext passwords during changetsmpassword command execution, which allows local users to obtain sensitive information by reading the application trace output.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT11349; http://www-01.ibm.com/support/docview.wss?uid=swg21969514; http://www-01.ibm.com/support/docview.wss?uid=swg1IT11349
CVE: CVE-2015-7419
Published: 2015-11-14
Description: IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service (memory consumption) via crafted requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI50952; http://www-01.ibm.com/support/docview.wss?uid=swg21969906; http://www.securitytracker.com/id/1034146
CVE: CVE-2015-7427
Published: 2015-11-14
Description: IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x before 7.0.0.10, 7.1.0.x before 7.1.0.7, and 7.2.x before 7.2.0.1 do not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IT10279; http://www-01.ibm.com/support/docview.wss?uid=swg21969342; http://www-01.ibm.com/support/docview.wss?uid=swg1IT10279
CVE: CVE-2015-7774
Published: 2015-11-14
Description: PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-78
References: http://jvn.jp/en/jp/JVN25323093/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000180; http://www.pwebmanager.org/
CVE: CVE-2015-3977
Published: 2015-11-15
Description: Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HART reply.
CVSS Score: 7.7 (HIGH)
CWE: CWE-119
References: http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-223-01; http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-215-01
CVE: CVE-2015-7830
Published: 2015-11-15
Description: The pcapng_read_if_descr_block function in wiretap/pcapng.c in the pcapng parser in Wireshark 1.12.x before 1.12.8 uses too many levels of pointer indirection, which allows remote attackers to cause a denial of service (incorrect free and application crash) via a crafted packet that triggers interface-filter copying.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2015-10/msg00053.html; http://www.debian.org/security/2016/dsa-3505; http://www.oracle.com/technetwork/topics/security/bulletinoct2[PII_REDACTED].html
CVE: CVE-2015-2925
Published: 2015-11-16
Description: The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."
CVSS Score: 6.9 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=397d425dc26da728396e66d392d5dcb8dac30c37; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cde93be45a8a90d8c264c776fab63487b5038a65; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
CVE: CVE-2015-5257
Published: 2015-11-16
Description: drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted USB device.  NOTE: this ID was incorrectly used for an Apache Cordova issue that has the correct ID of CVE-2015-8320.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbb4be652d374f[PII_REDACTED]6b8f357a1827d6a4; http://www.debian.org/security/2015/dsa-3372; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4
CVE: CVE-2015-5307
Published: 2015-11-16
Description: The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html
CVE: CVE-2015-7312
Published: 2015-11-16
Description: Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and 4.x allow local users to cause a denial of service (use-after-free and BUG) or possibly gain privileges via a (1) madvise or (2) msync system call, related to mm/madvise.c and mm/msync.c.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362, CWE-416
References: http://sourceforge.net/p/aufs/mailman/message/34449209/; http://www.debian.org/security/2015/dsa-3364; http://www.openwall.com/lists/oss-security/2015/09/22/10
CVE: CVE-2015-7872
Published: 2015-11-16
Description: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce1fad2740c648a4340f6f6c391a8a83769d2e8c; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html
CVE: CVE-2015-8104
Published: 2015-11-16
Description: The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cbdb967af3d54993f5814f1cee0ed311a055377d; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172187.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172300.html
CVE: CVE-2014-9752
Published: 2015-11-16
Description: Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the file in content/.
CVSS Score: 6.5 (MEDIUM)
References: http://karmainsecurity.com/KIS-2015-05; http://packetstormsecurity.com/files/134215/ATutor-2.2-File-Upload.html; http://seclists.org/fulldisclosure/2015/Nov/10
CVE: CVE-2015-7712
Published: 2015-11-16
Description: Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlier allow remote authenticated users with the AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the (1) asc or (2) desc parameter.
CVSS Score: 6.5 (MEDIUM)
References: http://karmainsecurity.com/KIS-2015-08; http://packetstormsecurity.com/files/134218/ATutor-2.2-PHP-Code-Injection.html; http://seclists.org/fulldisclosure/2015/Nov/13
CVE: CVE-2015-7815
Published: 2015-11-16
Description: Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute arbitrary local files via the viewDataTable parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://karmainsecurity.com/KIS-2015-09; http://packetstormsecurity.com/files/134219/Piwik-2.14.3-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2015/Nov/14
CVE: CVE-2015-7816
Published: 2015-11-16
Description: The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object injection attacks, conduct Server-Side Request Forgery (SSRF) attacks, and execute arbitrary PHP code via a crafted HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://karmainsecurity.com/KIS-2015-10; http://packetstormsecurity.com/files/134220/Piwik-2.14.3-PHP-Object-Injection.html; http://seclists.org/fulldisclosure/2015/Nov/15
CVE: CVE-2015-7897
Published: 2015-11-16
Description: The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://googleprojectzero.blogspot.com/2015/11/hack-galaxy-hunting-bugs-in-samsung.html; http://packetstormsecurity.com/files/134199/Samsung-Galaxy-S6-Android.media.process-Face-Recognition-Memory-Corruption.html; https://code.google.com/p/google-security-research/issues/detail?id=499&q=samsung
CVE: CVE-2015-2924
Published: 2015-11-16
Description: The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager 1.x allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message, a similar issue to CVE-2015-2922.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157803.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158103.html; http://openwall.com/lists/oss-security/2015/04/04/2
CVE: CVE-2015-8215
Published: 2015-11-16
Description: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272.  NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77751427a1ff25b27d47a4c36b12c3c8667855ac; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html
CVE: CVE-2015-8216
Published: 2015-11-17
Description: The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-17
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d24888ef19ba38b787b11d1ee091a3d94920c76a; http://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html; https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html
CVE: CVE-2015-8217
Published: 2015-11-17
Description: The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=93f30f825c08477fe8f76be00539e96014cc83c8; http://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html; https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html
CVE: CVE-2015-8218
Published: 2015-11-17
Description: The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted CCITT FAX data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d4a731b84a08f0f3839eaaaf82e97d8d9c67da46; http://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=d4a731b84a08f0f3839eaaaf82e97d8d9c67da46
CVE: CVE-2015-8219
Published: 2015-11-17
Description: The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=43492ff3ab68a343c1264801baa1d5a02de10167; http://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=43492ff3ab68a343c1264801baa1d5a02de10167
CVE: CVE-2015-0272
Published: 2015-11-17
Description: GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.
CVSS Score: 5.0 (MEDIUM)
References: http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d5fc88e573fa58b93034b04d35a2454f5d28cad9; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
CVE: CVE-2015-5217
Published: 2015-11-17
Description: providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/10/27/8; https://bugzilla.redhat.com/show_bug.cgi?id=1255172; https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1
CVE: CVE-2015-5276
Published: 2015-11-17
Description: The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2015-11/msg00054.html; http://lists.opensuse.org/opensuse-updates/2016-04/msg00052.html; http://www.securitytracker.com/id/1034375
CVE: CVE-2015-5301
Published: 2015-11-17
Description: providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171052.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171067.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171076.html
CVE: CVE-2015-5311
Published: 2015-11-17
Description: PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171865.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171976.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172193.html
CVE: CVE-2015-5602
Published: 2015-11-17
Description: sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://bugzilla.sudo.ws/show_bug.cgi?id=707; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171024.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171054.html
CVE: CVE-2015-7805
Published: 2015-11-17
Description: Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in an AIFF file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171466.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172593.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172607.html
CVE: CVE-2015-7812
Published: 2015-11-17
Description: The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible hypercall to the multicall interface.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-254
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html
CVE: CVE-2015-7995
Published: 2015-11-17
Description: The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html; http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
CVE: CVE-2015-7996
Published: 2015-11-17
Description: The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://support.citrix.com/article/CTX202482; http://www.securitytracker.com/id/1034167; http://support.citrix.com/article/CTX202482
CVE: CVE-2015-7997
Published: 2015-11-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://support.citrix.com/article/CTX202482; http://www.securitytracker.com/id/1034167; http://support.citrix.com/article/CTX202482