2015

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended

Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrar

The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to e

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code vi

HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows re

The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows lo

Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r

vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial

The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADI

EMC RSA Web Threat Detection before 5.1 SP1 allows local users to obtain root privileges by leveraging access to a servi

EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration file, which allows rem

object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls o

bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow acti

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web scri

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitra

IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote au

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comma

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of

PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL q

ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser a

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to

Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirr

Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitive

libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically prox

Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.1

GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption

GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption

The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to c

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified imp

The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI upd

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server vi

The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a den

The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow lo

The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attack

The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment vari

The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequireP

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via

The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial

IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrupt

rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors inv

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vecto

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request m

The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes i

The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret direc

Notes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive information via unspecifi

The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial o