|Max CVSS||9.3||Min CVSS||3.6||Total Count||2|
|ID||CVSS||Summary||Last (major) update||Published|
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote atta
|15-04-2019 - 16:29||16-02-2015 - 00:59|
The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of serv
|05-01-2018 - 02:30||27-05-2015 - 10:59|
The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 188.8.131.52 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers
|22-09-2017 - 01:29||15-12-2014 - 18:59|
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. NOTE: this issue was
|31-12-2016 - 02:59||14-05-2015 - 14:59|
The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file. <a href="https://cwe.
|28-11-2016 - 19:16||19-05-2015 - 18:59|
Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.
|15-11-2016 - 20:10||16-08-2015 - 01:59|