Total
11965 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2015-8072 | 1 Google | 1 Android | 2015-11-03 | 10.0 HIGH | N/A |
mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073. | |||||
CVE-2015-8028 | 1 Sap | 1 3d Visual Enterprise Viewer | 2015-11-02 | 6.8 MEDIUM | N/A |
Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via a crafted (1) 3DM or (2) Flic Animation file. | |||||
CVE-2015-8029 | 1 Sap | 1 3d Visual Enterprise Viewer | 2015-11-02 | 6.8 MEDIUM | N/A |
SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corruption. | |||||
CVE-2015-8030 | 1 Sap | 1 3d Visual Enterprise Viewer | 2015-11-02 | 6.8 MEDIUM | N/A |
SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted (1) U3D, (2) LWO, (3) JPEG2000, or (4) FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities. | |||||
CVE-2014-1253 | 1 Apple | 1 Boot Camp | 2015-11-02 | 4.7 MEDIUM | N/A |
AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file. | |||||
CVE-2015-6006 | 1 Medicomp | 1 Medcin Engine | 2015-10-30 | 7.5 HIGH | N/A |
The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service (integer truncation and heap-based buffer overflow) via a crafted packet on port 8190. | |||||
CVE-2015-2898 | 1 Medicomp | 1 Medcin Engine | 2015-10-29 | 6.8 MEDIUM | N/A |
Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to (1) the SetGroupSequenceEx na_setgroupsequenceex function, (2) the FormatDate julptostr function, and (3) the UserFindingCodes addtocl function. | |||||
CVE-2015-2899 | 1 Medicomp | 1 Medcin Engine | 2015-10-29 | 6.8 MEDIUM | N/A |
Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190. | |||||
CVE-2015-2901 | 1 Medicomp | 1 Medcin Engine | 2015-10-29 | 6.8 MEDIUM | N/A |
Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to (1) the GetProperty info_getproperty function and (2) the GetProperty UdfCodeList function. | |||||
CVE-2015-2900 | 1 Medicomp | 1 Medcin Engine | 2015-10-29 | 6.8 MEDIUM | N/A |
The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted packet on port 8190. | |||||
CVE-2015-6492 | 1 Rockwellautomation | 2 Micrologix 1100 Firmware, Micrologix 1400 Firmware | 2015-10-28 | 7.8 HIGH | N/A |
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request. | |||||
CVE-2015-6490 | 1 Rockwellautomation | 2 Micrologix 1100 Firmware, Micrologix 1400 Firmware | 2015-10-28 | 10.0 HIGH | N/A |
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors. | |||||
CVE-2015-6985 | 1 Apple | 1 Mac Os X | 2015-10-27 | 6.8 MEDIUM | N/A |
Apple Type Services (ATS) in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web page. | |||||
CVE-2015-7021 | 1 Apple | 1 Mac Os X | 2015-10-27 | 7.2 HIGH | N/A |
The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unspecified vectors. | |||||
CVE-2015-7020 | 1 Apple | 1 Mac Os X | 2015-10-27 | 5.6 MEDIUM | N/A |
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7019. | |||||
CVE-2015-5944 | 1 Apple | 1 Mac Os X | 2015-10-27 | 6.8 MEDIUM | N/A |
CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file. | |||||
CVE-2015-1001 | 1 Ininet Solutions | 1 Scada Web Server | 2015-10-27 | 10.0 HIGH | N/A |
Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request. | |||||
CVE-2015-5938 | 1 Apple | 1 Mac Os X | 2015-10-27 | 6.8 MEDIUM | N/A |
ImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image. | |||||
CVE-2015-5933 | 1 Apple | 1 Mac Os X | 2015-10-27 | 6.8 MEDIUM | N/A |
Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5934. | |||||
CVE-2015-5934 | 1 Apple | 1 Mac Os X | 2015-10-27 | 6.8 MEDIUM | N/A |
Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, a different vulnerability than CVE-2015-5933. |