CVE-2015-2015
published 2015-08-23CVE-2015-2015: Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows remote attackers to…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
0.95%
57.1th percentile
Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | domino | <= 8.5.3 | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9fc2-rwr3-r45x: Cross-site scripting (XSS) vulnerability in pubnames
ghsa_unreviewed·2022-05-17
CVE-2015-2015 [MEDIUM] CWE-79 GHSA-9fc2-rwr3-r45x: Cross-site scripting (XSS) vulnerability in pubnames
Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN.
Red Hat
flash-plugin: multiple code execution flaws (APSB15-19)
vendor_redhat·2015-08-12·CVSS 10.0
CVE-2015-5547 [CRITICAL] flash-plugin: multiple code execution flaws (APSB15-19)
flash-plugin: multiple code execution flaws (APSB15-19)
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher [fedora-24]
bugzilla·2017-04-20·CVSS 3.3
CVE-2015-6644 [LOW] CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher [fedora-24]
CVE-2015-6644 bouncycastle: Information disclosure in GCMBlockCipher [fedora-24]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-24.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Discussion:
Use the following template to for the
Bugzilla
CVE-2015-5162 openstack-glance: openstack-nova/glance/cinder: Malicious image may exhaust resources [fedora-all]
bugzilla·2016-10-07·CVSS 7.5
CVE-2015-5162 [HIGH] CVE-2015-5162 openstack-glance: openstack-nova/glance/cinder: Malicious image may exhaust resources [fedora-all]
CVE-2015-5162 openstack-glance: openstack-nova/glance/cinder: Malicious image may exhaust resources [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affe
Bugzilla
CVE-2015-0855 pitivi: insecure use of os.system() [fedora-all]
bugzilla·2016-01-04·CVSS 9.8
CVE-2015-0855 [CRITICAL] CVE-2015-0855 pitivi: insecure use of os.system() [fedora-all]
CVE-2015-0855 pitivi: insecure use of os.system() [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While o
Bugzilla
CVE-2015-8543 kernel: IPv6 connect causes DoS via NULL pointer dereference
bugzilla·2015-12-10·CVSS 7.0
CVE-2015-8543 [HIGH] CVE-2015-8543 kernel: IPv6 connect causes DoS via NULL pointer dereference
CVE-2015-8543 kernel: IPv6 connect causes DoS via NULL pointer dereference
It was found that in net/ipv4/af_inet.c, PC will contain 0x0 if sk->sk_prot->get_port is NULL, leading to kernel null pointer dereference.
Vulnerable code:
static int inet_autobind(struct sock *sk)
{
struct inet_sock *inet;
/* We may need to bind the socket. */
lock_sock(sk);
inet = inet_sk(sk);
if (!inet->inet_num) {
if (sk->sk_prot->get_port(sk, 0)) {
release_sock(sk);
return -EAGAIN;
}
inet->inet_sport = htons(inet->inet_num);
}
release_sock(sk);
return 0;
}
CVE request (contains reproducer):
http://seclists.org/oss-sec/2015/q4/458
Discussion:
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1290477]
---
This issue got CVE-2015-8543 for Android kernel. Linux kernel might get as well
Bugzilla
CVE-2015-8389 mingw-pcre: pcre: Infinite recursion in JIT compiler when processing certain patterns [epel-7]
bugzilla·2015-12-02·CVSS 9.8
CVE-2015-8389 [CRITICAL] CVE-2015-8389 mingw-pcre: pcre: Infinite recursion in JIT compiler when processing certain patterns [epel-7]
CVE-2015-8389 mingw-pcre: pcre: Infinite recursion in JIT compiler when processing certain patterns [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-7 tracking bug
Bugzilla
CVE-2015-5211 springframework: Spring Framework: Reflected File Download (RFD) vulnerability [fedora-all]
bugzilla·2015-10-19·CVSS 9.6
CVE-2015-5211 [CRITICAL] CVE-2015-5211 springframework: Spring Framework: Reflected File Download (RFD) vulnerability [fedora-all]
CVE-2015-5211 springframework: Spring Framework: Reflected File Download (RFD) vulnerability [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mul
Bugzilla
CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT [fedora-all]
bugzilla·2015-10-16·CVSS 5.0
CVE-2015-5302 [MEDIUM] CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT [fedora-all]
CVE-2015-5302 libreport: Possible private data leak in Bugzilla bugs opened by ABRT [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple sup
Bugzilla
CVE-2015-5169 struts: XSS vulnerability when devMode is turned on [fedora-all]
bugzilla·2015-09-04·CVSS 6.1
CVE-2015-5169 [MEDIUM] CVE-2015-5169 struts: XSS vulnerability when devMode is turned on [fedora-all]
CVE-2015-5169 struts: XSS vulnerability when devMode is turned on [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of
Bugzilla
CVE-2015-5221 jasper: Use-after-free and double-free flaws in Jasper JPEG-2000 library [epel-5]
bugzilla·2015-08-21·CVSS 5.5
CVE-2015-5221 [MEDIUM] CVE-2015-5221 jasper: Use-after-free and double-free flaws in Jasper JPEG-2000 library [epel-5]
CVE-2015-5221 jasper: Use-after-free and double-free flaws in Jasper JPEG-2000 library [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-5 tracking bug for jasper: s
Bugzilla
CVE-2015-4473 Mozilla: Miscellaneous memory safety hazards (rv:38.2) (MFSA 2015-79)
bugzilla·2015-08-11·CVSS 10.0
CVE-2015-4473 [CRITICAL] CVE-2015-4473 Mozilla: Miscellaneous memory safety hazards (rv:38.2) (MFSA 2015-79)
CVE-2015-4473 Mozilla: Miscellaneous memory safety hazards (rv:38.2) (MFSA 2015-79)
Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.
Gary Kwong, Christian Holler, and Byron Campen reported memory safety problems and crashes that affect Firefox ESR 38.1 and Firefox 39.
External Reference:
https://www.mozilla.org/security/announce/2015/mfsa2015-79.html
Acknowledgements:
Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges Gary Kwong, Christian Holler, and
Bugzilla
CVE-2015-1051 drupal7-context: open redirect vulnerability (SA-CONTRIB-2015-004)
bugzilla·2015-01-16·CVSS 5.8
CVE-2015-1051 [MEDIUM] CVE-2015-1051 drupal7-context: open redirect vulnerability (SA-CONTRIB-2015-004)
CVE-2015-1051 drupal7-context: open redirect vulnerability (SA-CONTRIB-2015-004)
It was reported [1] that Context UI module wasn't checking for external URLs in the HTTP GET destination parameter when redirecting users that are activating/deactivating the Context UI inline editor dialog, thereby leading to an Open Redirect vulnerability.
This vulnerability is mitigated by the fact that the victim must have the permission "administer contexts" and that Context UI module must be enabled.
[1]: https://www.drupal.org/node/2403351
Discussion:
Created drupal6-context tracking bugs for this issue:
Affects: fedora-all [bug 1182941]
Affects: epel-all [bug 1182943]
---
Created drupal7-context tracking bugs for this issue:
Affects: fedora-all [bug 1182942]
Affects: epel-all [bug 1182944]
--
Krebs
Yet Another Flash Patch Fixes Zero-Day Flaw – Krebs on Security
blogs_krebs·2015-02-01·CVSS 9.8
CVE-2015-0313 [CRITICAL] Yet Another Flash Patch Fixes Zero-Day Flaw – Krebs on Security
For the third time in two weeks, Adobe has issued an emergency security update for its Flash Player software to fix a dangerous zero-day vulnerability that hackers already are exploiting to launch drive-by download attacks.
The newest update, version 16.0.0.305 , addresses a critical security bug ( CVE-2015-0313 ) present in the version of Flash that Adobe released o n Jan. 27 ( v. 16.0.0.296 ). Adobe said it is are aware of reports that this vulnerability is being actively exploited in the wild via drive-by-download attacks against systems running Internet Explorer and Firefox on Windows 8.1 and below.
Adobe’s advisory credits both Trend Micro and Microsoft with reporting this bug. Trend Micro published a blog post three days ago warning that the flaw was being used in malvertising atta
2015-08-23
Published