CVE 2015 document archive · 8
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 8 / 23
- CVE-2015-7204Mozilla: Crash with JavaScript variable assignment with unboxed objects (MFSA 2015-135)
- CVE-2015-7203Mozilla: Buffer overflows found through code inspection (MFSA 2015-144)
- CVE-2015-7202Mozilla: Miscellaneous memory safety hazards (rv:43.0) (MFSA 2015-134)
- CVE-2015-7201Mozilla: Miscellaneous memory safety hazards (rv:38.5) (MFSA 2015-134)
- CVE-2015-7200Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)
- CVE-2015-7199Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)
- CVE-2015-7198Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)
- CVE-2015-7197Mozilla: Mixed content WebSocket policy bypass through workers (MFSA 2015-132)
- CVE-2015-7196Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130)
- CVE-2015-7195Mozilla: Certain escaped characters in host of Location-header are being treated as non-escaped (MFSA 2015-129)
- CVE-2015-7194Mozilla: Memory corruption in libjar through zip files (MFSA 2015-128)
- CVE-2015-7193Mozilla: CORS preflight is bypassed when non-standard Content-Type headers are received (MFSA 2015-127)
- CVE-2015-7189Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)
- CVE-2015-7188Mozilla: Trailing whitespace in IP address hostnames can bypass same-origin policy (MFSA 2015-122)
- CVE-2015-7187Mozilla: disabling scripts in Add-on SDK panels has no effect (MFSA 2015-121)
- CVE-2015-7184firefox: cross-origin restriction bypass using Fetch
- CVE-2015-7183nspr: heap-buffer overflow in PL_ARENA_ALLOCATE (MFSA 2015-133)
- CVE-2015-7182nss: ASN.1 decoder heap overflow when decoding constructed OCTET STRING that mixes indefinite and definite length encodings (MFSA 2015-133)
- CVE-2015-7181nss: use-after-poison in sec_asn1d_parse_leaf() (MFSA 2015-133)
- CVE-2015-7180Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
- CVE-2015-7179Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)
- CVE-2015-7178Mozilla: Memory safety errors in libGLES in the ANGLE graphics library (MFSA 2015-113)
- CVE-2015-7177Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
- CVE-2015-7176Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
- CVE-2015-7175Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
- CVE-2015-7174Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
- CVE-2015-7036sqlite: arbitrary code execution on databases with malformed schema
- CVE-2015-6937kernel: net: rds: NULL pointer dereference in net/rds/connection.c
- CVE-2015-6908openldap: ber_get_next denial of service vulnerability
- CVE-2015-6855Qemu: ide: divide by zero issue
- CVE-2015-6838php: NULL pointer dereference in XSLTProcessor class
- CVE-2015-6837php: NULL pointer dereference in XSLTProcessor class
- CVE-2015-6836php: SOAP serialize_function_call() type confusion
- CVE-2015-6835php: use-after-free vulnerability in session deserializer
- CVE-2015-6834php: multiple unserialization use-after-free issues
- CVE-2015-6833php: Files from archive can be extracted outside of destination directory using phar
- CVE-2015-6832php: dangling pointer in the unserialization of ArrayObject items
- CVE-2015-6831php: Use After Free Vulnerability in unserialize()
- CVE-2015-6815qemu: net: e1000: infinite loop issue
- CVE-2015-6806screen: Stack overflow due to deep recursion causing process freeze
- CVE-2015-6749vorbis-tools: invalid AIFF file causes alloca() buffer overflow
- CVE-2015-6581openjpeg: Double free vulnerability in opj_j2k_copy_default_tcp_and_create_tcd
- CVE-2015-6565openssh: Incorrectly set TTYs to be world-writable
- CVE-2015-6564openssh: Use-after-free bug related to PAM support
- CVE-2015-6563openssh: Privilege separation weakness related to PAM support
- CVE-2015-6527php: Arbitrary code execution in str_ireplace function
- CVE-2015-6526kernel: perf on ppc64 can loop forever getting userlevel stacktraces
- CVE-2015-6525libevent: multiple integer overflows in the evbuffer APIs
- CVE-2015-6496conntrackd crash on unexpected network traffic
- CVE-2015-6360libsrtp: improper handling of CSRC count and extension header length in RTP header