CVE & Exploit Intelligence Database

CVE-2015-6434 6.1 MEDIUM EPSS 0.00

Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCux64856.

CWE-79 Jan 08, 2016

CVE-2015-6433 6.5 MEDIUM EPSS 0.00

SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767.

CWE-89 Jan 08, 2016

CVE-2015-6646 6.2 MEDIUM EPSS 0.00

The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource consumption) by leveraging improper interaction between IPC resource allocation and the memory manager, aka internal bug 22300191, a different vulnerability than CVE-2015-7613.

CWE-399 Jan 06, 2016

CVE-2015-6645 5.0 MEDIUM EPSS 0.00

SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) via a crafted application, aka internal bug 23591205.

CWE-264 Jan 06, 2016

CVE-2015-6643 6.6 MEDIUM EPSS 0.00

Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism via unspecified vectors, aka internal bug 25290269.

CWE-264 Jan 06, 2016

CVE-2015-5310 4.3 MEDIUM EPSS 0.00

The WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection (MFP) was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service (ignored packets) via a WNM Sleep Mode response.

CWE-200 Jan 06, 2016

CVE-2015-5447 5.4 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jan 05, 2016

CVE-2015-5434 6.5 MEDIUM EPSS 0.01

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."

CWE-264 Jan 05, 2016

CVE-2014-5040 6.8 MEDIUM EPSS 0.00

HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary (1) access key credentials by leveraging knowledge of a key ID or (2) signing certificates by leveraging knowledge of a certificate ID.

CWE-264 Jan 05, 2016

CVE-2015-8742 5.5 MEDIUM EPSS 0.00

The dissect_CPMSetBindings function in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.1 does not validate the column size, which allows remote attackers to cause a denial of service (memory consumption or application crash) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8741 5.5 MEDIUM EPSS 0.00

The dissect_ppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8740 5.3 MEDIUM 1 PoC Analysis EPSS 0.03

The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x before 2.0.1 does not validate the number of columns, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8739 5.5 MEDIUM 1 PoC Analysis EPSS 0.01

The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 improperly attempts to access a packet scope, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8738 5.5 MEDIUM EPSS 0.00

The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8737 5.5 MEDIUM EPSS 0.00

The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.

CWE-20 Jan 04, 2016

CVE-2015-8736 5.5 MEDIUM 1 PoC Analysis EPSS 0.01

The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file.

CWE-20 Jan 04, 2016

CVE-2015-8735 5.5 MEDIUM 1 PoC Analysis EPSS 0.01

The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8734 5.5 MEDIUM EPSS 0.00

The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

CWE-20 Jan 04, 2016

CVE-2015-8733 5.5 MEDIUM 1 PoC Analysis EPSS 0.02

The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.

CWE-20 Jan 04, 2016

CVE-2015-8732 5.5 MEDIUM 1 PoC Analysis EPSS 0.01

The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

CWE-20 Jan 04, 2016