CVE 2015 document archive · 20
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 20 / 23
- CVE-2015-1419vsftpd: access restrictions bypass
- CVE-2015-1396patch: directory traversal via symlinks (incomplete fix for CVE-2015-1196)
- CVE-2015-1395patch: directory traversal via file rename
- CVE-2015-1379socat: possible DoS with fork
- CVE-2015-1352php: NULL pointer dereference in pgsql extension
- CVE-2015-1351php: use after free in opcache extension
- CVE-2015-1350kernel: denial of service in notify_change for filesystem xattrs
- CVE-2015-1349bind: issue in trust anchor management can cause named to crash
- CVE-2015-1345grep: heap buffer overrun
- CVE-2015-1339kernel: Memory exhaustion via CUSE driver
- CVE-2015-1336man-db: TOCTOU bug when processing catman pages
- CVE-2015-1333kernel: denial of service due to memory leak in add_key()
- CVE-2015-1315unzip: charset_to_intern() buffer overflow
- CVE-2015-1308kde-workspace: X11 clients can eavesdrop input events while screen is locked
- CVE-2015-1270ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89
- CVE-2015-1258chromium-browser: Negative-size parameter in Libvpx.
- CVE-2015-1212chromium-browser: various security fixes in Chrome 40.0.2214.111
- CVE-2015-1209chromium-browser: use-after-free in DOM
- CVE-2015-1197cpio: directory traversal through symlinks
- CVE-2015-1196patch: directory traversal via symlinks
- CVE-2015-1159cups: cross-site scripting flaw in CUPS web UI (VU#810572)
- CVE-2015-1158cups: incorrect string reference counting (VU#810572)
- CVE-2015-0973libpng: Heap-buffer overflow png_combine_row() with very wide interlaced images
- CVE-2015-0881squid: CRLF injection flaw permitting HTTP response splitting attacks
- CVE-2015-0848libwmf: heap overflow when decoding BMP images
- CVE-2015-0839hplip: hp-plugin verified binary download with short key ID
- CVE-2015-0837libgcrypt: last-level cache side-channel attack
- CVE-2015-0836Mozilla: Miscellaneous memory safety hazards (rv:31.5) (MFSA 2015-11)
- CVE-2015-0835Mozilla: Miscellaneous memory safety hazards (rv:36.0) (MFSA 2015-11)
- CVE-2015-0834Mozilla: TLS TURN and STUN connections silently fail to simple TCP connections (MFSA 2015-15)
- CVE-2015-0832Mozilla: Appended period to hostnames can bypass HPKP and HSTS protections (MFSA 2015-13)
- CVE-2015-0831Mozilla: Use-after-free in IndexedDB (MFSA 2015-16)
- CVE-2015-0830Mozilla: Malicious WebGL content crash when writing strings (MFSA 2015-14)
- CVE-2015-0829Mozilla: Buffer overflow in libstagefright during MP4 video playback (MFSA 2015-17)
- CVE-2015-0828Mozilla: Double-free when using non-default memory allocators with a zero-length XHR (MFSA 2015-18)
- CVE-2015-0827Mozilla: Out-of-bounds read and write while rendering SVG content (MFSA 2015-19)
- CVE-2015-0826Mozilla: Buffer overflow during CSS restyling (MFSA 2015-20)
- CVE-2015-0825Mozilla: Buffer underflow during MP3 playback (MFSA 2015-21)
- CVE-2015-0824Mozilla: Crash using DrawTarget in Cairo graphics library (MFSA 2015-22)
- CVE-2015-0823Mozilla: Use-after-free in Developer Console date with OpenType Sanitiser (MFSA 2015-23)
- CVE-2015-0822Mozilla: Reading of local files through manipulation of form autocomplete (MFSA 2015-24)
- CVE-2015-0821Mozilla: Local files or privileged URLs in pages can be opened into new tabs (MFSA 2015-25)
- CVE-2015-0819Mozilla: UI Tour whitelisted sites in background tab can spoof foreground tabs (MFA 2015-26)
- CVE-2015-0818Mozilla: Privilege escalation through SVG navigation (MFSA 2015-28)
- CVE-2015-0817Mozilla: Code execution through incorrect JavaScript bounds checking elimination (MFSA 2015-29)
- CVE-2015-0816Mozilla: resource: // documents can load privileged pages (MFSA 2015-33)
- CVE-2015-0815Mozilla: Miscellaneous memory safety hazards (rv:31.6) (MFSA 2015-30)
- CVE-2015-0814Mozilla: Miscellaneous memory safety hazards (rv:37.0) (MFSA 2015-30)
- CVE-2015-0813Mozilla: Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31)
- CVE-2015-0812Mozilla: Add-on lightweight theme installation approval bypassed through MITM attack (MFSA 2015-32)