CVE 2015 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,111 documents · Identifier year 2015 · 20 / 23

  1. CVE-2015-1419vsftpd: access restrictions bypass
  2. CVE-2015-1396patch: directory traversal via symlinks (incomplete fix for CVE-2015-1196)
  3. CVE-2015-1395patch: directory traversal via file rename
  4. CVE-2015-1379socat: possible DoS with fork
  5. CVE-2015-1352php: NULL pointer dereference in pgsql extension
  6. CVE-2015-1351php: use after free in opcache extension
  7. CVE-2015-1350kernel: denial of service in notify_change for filesystem xattrs
  8. CVE-2015-1349bind: issue in trust anchor management can cause named to crash
  9. CVE-2015-1345grep: heap buffer overrun
  10. CVE-2015-1339kernel: Memory exhaustion via CUSE driver
  11. CVE-2015-1336man-db: TOCTOU bug when processing catman pages
  12. CVE-2015-1333kernel: denial of service due to memory leak in add_key()
  13. CVE-2015-1315unzip: charset_to_intern() buffer overflow
  14. CVE-2015-1308kde-workspace: X11 clients can eavesdrop input events while screen is locked
  15. CVE-2015-1270ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89
  16. CVE-2015-1258chromium-browser: Negative-size parameter in Libvpx.
  17. CVE-2015-1212chromium-browser: various security fixes in Chrome 40.0.2214.111
  18. CVE-2015-1209chromium-browser: use-after-free in DOM
  19. CVE-2015-1197cpio: directory traversal through symlinks
  20. CVE-2015-1196patch: directory traversal via symlinks
  21. CVE-2015-1159cups: cross-site scripting flaw in CUPS web UI (VU#810572)
  22. CVE-2015-1158cups: incorrect string reference counting (VU#810572)
  23. CVE-2015-0973libpng: Heap-buffer overflow png_combine_row() with very wide interlaced images
  24. CVE-2015-0881squid: CRLF injection flaw permitting HTTP response splitting attacks
  25. CVE-2015-0848libwmf: heap overflow when decoding BMP images
  26. CVE-2015-0839hplip: hp-plugin verified binary download with short key ID
  27. CVE-2015-0837libgcrypt: last-level cache side-channel attack
  28. CVE-2015-0836Mozilla: Miscellaneous memory safety hazards (rv:31.5) (MFSA 2015-11)
  29. CVE-2015-0835Mozilla: Miscellaneous memory safety hazards (rv:36.0) (MFSA 2015-11)
  30. CVE-2015-0834Mozilla: TLS TURN and STUN connections silently fail to simple TCP connections (MFSA 2015-15)
  31. CVE-2015-0832Mozilla: Appended period to hostnames can bypass HPKP and HSTS protections (MFSA 2015-13)
  32. CVE-2015-0831Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)
  33. CVE-2015-0830Mozilla: Malicious WebGL content crash when writing strings (MFSA 2015-14)
  34. CVE-2015-0829Mozilla: Buffer overflow in libstagefright during MP4 video playback (MFSA 2015-17)
  35. CVE-2015-0828Mozilla: Double-free when using non-default memory allocators with a zero-length XHR (MFSA 2015-18)
  36. CVE-2015-0827Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)
  37. CVE-2015-0826Mozilla: Buffer overflow during CSS restyling (MFSA 2015-20)
  38. CVE-2015-0825Mozilla: Buffer underflow during MP3 playback (MFSA 2015-21)
  39. CVE-2015-0824Mozilla: Crash using DrawTarget in Cairo graphics library (MFSA 2015-22)
  40. CVE-2015-0823Mozilla: Use-after-free in Developer Console date with OpenType Sanitiser (MFSA 2015-23)
  41. CVE-2015-0822Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)
  42. CVE-2015-0821Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-25)
  43. CVE-2015-0819Mozilla: UI Tour whitelisted sites in background tab can spoof foreground tabs (MFA 2015-26)
  44. CVE-2015-0818Mozilla: Privilege escalation through SVG navigation (MFSA 2015-28)
  45. CVE-2015-0817Mozilla: Code execution through incorrect JavaScript bounds checking elimination (MFSA 2015-29)
  46. CVE-2015-0816Mozilla: resource: // documents can load privileged pages (MFSA 2015-33)
  47. CVE-2015-0815Mozilla: Miscellaneous memory safety hazards (rv:31.6) (MFSA 2015-30)
  48. CVE-2015-0814Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)
  49. CVE-2015-0813Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)
  50. CVE-2015-0812Mozilla: Add-on lightweight theme installation approval bypassed through MITM attack (MFSA 2015-32)
CVE 2015 document archive — Page 20 | PulseLinux