2015

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r

EMC RSA Web Threat Detection before 5.1 SP1 allows local users to obtain root privileges by leveraging access to a servi

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls o

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow acti

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of

PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL q

ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser a

Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.1

GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption

GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption

The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attack

The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrupt

rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors inv

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vecto

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request m

The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial o

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrupt

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrupt

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrupt

IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a den

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, wh

The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial o

The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an ins

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authentica

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a craft

libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privi

The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal b

Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka

Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of ser

libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (

The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser

The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as d

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of ser