PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2015 document archive · 18

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,110 documents · Identifier year 2015 · 18 / 23

  1. CVE-2015-2621OpenJDK: incorrect code permission checks in RMIConnectionImpl (JMX, 8075853)
  2. CVE-2015-2620mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015)
  3. CVE-2015-2617mysql: unspecified vulnerability related to Server:Partition (CPU July 2015)
  4. CVE-2015-2613JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)
  5. CVE-2015-2611mysql: unspecified vulnerability related to Server:DML (CPU July 2015)
  6. CVE-2015-2601OpenJDK: non-constant time comparisons in crypto code (JCE, 8074865)
  7. CVE-2015-2597JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Install)
  8. CVE-2015-2596JDK: unspecified vulnerability fixed in 7u85 (Hotspot)
  9. CVE-2015-2590OpenJDK: deserialization issue in ObjectInputStream.readSerialData() (Libraries, 8076401)
  10. CVE-2015-2582mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)
  11. CVE-2015-2576mysql-utilities: unspecified vulnerability related to Installation (CPU April 2015)
  12. CVE-2015-2575mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015)
  13. CVE-2015-2573mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)
  14. CVE-2015-2571mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015)
  15. CVE-2015-2568mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)
  16. CVE-2015-2567mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)
  17. CVE-2015-2566mysql: unspecified vulnerability related to Server:DML (CPU April 2015)
  18. CVE-2015-2348php: move_uploaded_file() NUL byte injection in file name
  19. CVE-2015-2331libzip: integer overflow when processing ZIP archives
  20. CVE-2015-2330webkitgtk: TLS certificate late verification
  21. CVE-2015-2328pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)
  22. CVE-2015-2327pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)
  23. CVE-2015-2326pcre: heap buffer over-read in pcre_compile2() (8.37/23)
  24. CVE-2015-2325pcre: heap buffer overflow in compile_branch()
  25. CVE-2015-2305regex: heap overflow in regcomp() on 32-bit architectures
  26. CVE-2015-2304libarchive: directory traversal in bsdcpio
  27. CVE-2015-2301php: use after free in phar_object.c
  28. CVE-2015-2296python-requests: session fixation and cookie stealing vulnerability
  29. CVE-2015-2265cups-filters: remote command execution in remove_bad_chars() (incomplete fix for CVE-2014-2707)
  30. CVE-2015-2192wireshark: SCSI OSD dissector could go into an infinite loop (wnpa-sec-2015-11)
  31. CVE-2015-2191wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)
  32. CVE-2015-2190wireshark: LLDP dissector could crash (wnpa-sec-2015-09)
  33. CVE-2015-2189wireshark: The pcapng file parser could crash (wnpa-sec-2015-08)
  34. CVE-2015-2188wireshark: The WCP dissector could crash while decompressing data (wnpa-sec-2015-07)
  35. CVE-2015-2187wireshark: ATN-CPDLC dissector could crash (wnpa-sec-2015-06)
  36. CVE-2015-2158pngcrush: pngcrush_measure_idat() off-by-one error
  37. CVE-2015-2155tcpdump: force printer vulnerability
  38. CVE-2015-2154tcpdump: ethernet printer osi_print_cksum() missing sanity checks out-of-bounds read
  39. CVE-2015-2153tcpdump: tcp printer rpki_rtr_pdu_print() missing length check
  40. CVE-2015-2080jetty: remote unauthenticated credential exposure
  41. CVE-2015-2059libidn: out-of-bounds read with stringprep on invalid UTF-8
  42. CVE-2015-2042kernel: rds: information handling flaw in rds sysctl files.
  43. CVE-2015-2041kernel: llc: information leak in llc2_timeout_table
  44. CVE-2015-1916JDK: unspecified SSL/TLS server DoS
  45. CVE-2015-1877xdg-utils: command injection vulnerability due to local variables collision in xdg-open
  46. CVE-2015-1870abrt: default abrt event scripts lead to information disclosure
  47. CVE-2015-1869abrt: default event scripts follow symbolic links
  48. CVE-2015-1867pacemaker: acl read-only access allow role assignment
  49. CVE-2015-1863wpa_supplicant: P2P SSID processing vulnerability
  50. CVE-2015-1862abrt: local privilege escalation through kernel.core_pattern
CVE 2015 document archive — Page 18 | PulseLinux