# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
33451 |
CVE-2015-8738 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The s7comm_decode_ud_cpu_szl_subfunc function in epan/dissectors/packet-s7comm_szl_ids.c in the S7COMM dissector in Wireshark 2.0.x before 2.0.1 does not validate the list count in an SZL response, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted packet. |
33452 |
CVE-2015-8737 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The mp2t_open function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not validate the bit rate, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file. |
33453 |
CVE-2015-8736 |
20 |
|
DoS Overflow |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reserve memory for a trailer, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted file. |
33454 |
CVE-2015-8735 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (invalid write operation and application crash) via a crafted packet. |
33455 |
CVE-2015-8734 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_nwp function in epan/dissectors/packet-nwp.c in the NWP dissector in Wireshark 2.0.x before 2.0.1 mishandles the packet type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33456 |
CVE-2015-8733 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The ngsniffer_process_record function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationships between record lengths and record header lengths, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file. |
33457 |
CVE-2015-8732 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the Total Profile Number field, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. |
33458 |
CVE-2015-8731 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not reject unknown TLV types, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. |
33459 |
CVE-2015-8730 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the number of items, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted packet. |
33460 |
CVE-2015-8729 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file. |
33461 |
CVE-2015-8728 |
20 |
|
DoS Overflow |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The Mobile Identity parser in (1) epan/dissectors/packet-ansi_a.c in the ANSI A dissector and (2) epan/dissectors/packet-gsm_a_common.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the tvb_bcd_dig_to_wmem_packet_str function, which allows remote attackers to cause a denial of service (buffer overflow and application crash) via a crafted packet. |
33462 |
CVE-2015-8727 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not properly maintain request-key data, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet. |
33463 |
CVE-2015-8726 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate certain signature and Modulation and Coding Scheme (MCS) data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file. |
33464 |
CVE-2015-8725 |
20 |
|
DoS Overflow |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the IPv6 prefix length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. |
33465 |
CVE-2015-8724 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not verify the WPA broadcast key length, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet. |
33466 |
CVE-2015-8723 |
20 |
|
DoS Overflow |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the relationship between the total length and the capture length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) via a crafted packet. |
33467 |
CVE-2015-8722 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate the frame pointer, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. |
33468 |
CVE-2015-8721 |
20 |
|
DoS Overflow |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 allows remote attackers to cause a denial of service (application crash) via a crafted packet with zlib compression. |
33469 |
CVE-2015-8720 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33470 |
CVE-2015-8719 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark 1.12.x before 1.12.9 mishandles the EDNS0 Client Subnet option, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33471 |
CVE-2015-8718 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
Double free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1, when the "Match MSG/RES packets for async NLM" option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33472 |
CVE-2015-8717 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x before 1.12.9 does not prevent use of a negative media count, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33473 |
CVE-2015-8716 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33474 |
CVE-2015-8715 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
epan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does not check for empty arguments, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. |
33475 |
CVE-2015-8714 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33476 |
CVE-2015-8713 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not properly reserve memory for channel ID mappings, which allows remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted packet. |
33477 |
CVE-2015-8712 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number of PDUs, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. |
33478 |
CVE-2015-8711 |
20 |
|
DoS |
2016-01-04 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet. |
33479 |
CVE-2015-8709 |
264 |
|
+Priv |
2016-02-07 |
2017-11-03 |
6.9 |
None |
Local |
Medium |
Not required |
Complete |
Complete |
Complete |
** DISPUTED ** kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here." |
33480 |
CVE-2015-8707 |
200 |
|
+Info |
2017-09-25 |
2017-10-10 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field. |
33481 |
CVE-2015-8705 |
20 |
|
DoS |
2016-01-20 |
2018-10-30 |
6.6 |
None |
Remote |
High |
Not required |
Partial |
Partial |
Complete |
buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option. |
33482 |
CVE-2015-8704 |
20 |
|
DoS |
2016-01-20 |
2018-10-30 |
6.8 |
None |
Remote |
Low |
Single system |
None |
None |
Complete |
apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed Address Prefix List (APL) record. |
33483 |
CVE-2015-8703 |
200 |
|
Bypass +Info |
2015-12-30 |
2016-11-28 |
4.0 |
None |
Remote |
Low |
Single system |
Partial |
None |
None |
ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authenticated users to bypass intended access restrictions, and discover credentials and keys, by reading the configuration file, a different vulnerability than CVE-2015-7248. |
33484 |
CVE-2015-8701 |
189 |
|
|
2016-12-29 |
2017-06-30 |
2.1 |
None |
Local |
Low |
Not required |
None |
None |
Partial |
QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit (tx) descriptors in 'tx_consume' routine, if a descriptor was to have more than allowed (ROCKER_TX_FRAGS_MAX=16) fragments. A privileged user inside guest could use this flaw to cause memory leakage on the host or crash the QEMU process instance resulting in DoS issue. |
33485 |
CVE-2015-8699 |
79 |
|
XSS |
2016-06-28 |
2016-11-28 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
Partial |
None |
Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
33486 |
CVE-2015-8698 |
|
|
DoS |
2016-06-28 |
2016-11-28 |
3.6 |
None |
Local |
Low |
Not required |
Partial |
None |
Partial |
CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. |
33487 |
CVE-2015-8697 |
284 |
|
|
2017-06-27 |
2017-07-03 |
2.1 |
None |
Local |
Low |
Not required |
None |
Partial |
None |
stalin 0.11-5 allows local users to write to arbitrary files. |
33488 |
CVE-2015-8688 |
20 |
|
|
2016-01-15 |
2016-12-07 |
5.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
None |
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. |
33489 |
CVE-2015-8687 |
79 |
|
XSS |
2017-03-23 |
2017-03-28 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent Motive Home Device Manager (HDM) before 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceTypeID parameter to DeviceType/getDeviceType.do; the (2) policyActionClass or (3) policyActionName parameter to PolicyAction/findPolicyActions.do; the deviceID parameter to (4) SingleDeviceMgmt/getDevice.do or (5) device/editDevice.do; the operation parameter to (6) ajax.do or (7) xmlHttp.do; or the (8) policyAction, (9) policyClass, or (10) policyName parameter to policy/findPolicies.do. |
33490 |
CVE-2015-8685 |
79 |
|
XSS |
2016-01-15 |
2016-12-07 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
Partial |
None |
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) external calendar url or (2) the bank name field in the "import external calendar" page. |
33491 |
CVE-2015-8684 |
79 |
|
XSS |
2017-01-18 |
2017-01-19 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
Partial |
None |
Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly have other unspecified impact as demonstrated by uploading a file with an .html extension, then accessing it via the elFinder functionality. |
33492 |
CVE-2015-8683 |
119 |
|
DoS Overflow |
2016-04-13 |
2018-01-04 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. |
33493 |
CVE-2015-8677 |
399 |
|
DoS +Info |
2016-04-14 |
2016-04-28 |
6.8 |
None |
Remote |
Low |
Single system |
None |
None |
Complete |
Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information. |
33494 |
CVE-2015-8675 |
255 |
|
+Info |
2016-01-15 |
2016-01-21 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physically proximate attackers to obtain sensitive password information by reading the display. |
33495 |
CVE-2015-8673 |
255 |
|
|
2016-01-12 |
2016-01-20 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation. |
33496 |
CVE-2015-8672 |
19 |
|
DoS |
2016-01-12 |
2016-06-01 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a wireless presentation. |
33497 |
CVE-2015-8671 |
264 |
|
|
2017-04-02 |
2017-04-05 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions. |
33498 |
CVE-2015-8670 |
20 |
|
DoS |
2017-04-02 |
2017-04-05 |
4.0 |
None |
Remote |
Low |
Single system |
None |
None |
Partial |
Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service. |
33499 |
CVE-2015-8669 |
200 |
|
+Info |
2015-12-26 |
2016-12-07 |
5.0 |
None |
Remote |
Low |
Not required |
Partial |
None |
None |
libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. |
33500 |
CVE-2015-8667 |
79 |
|
XSS |
2017-01-18 |
2017-01-19 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
Partial |
None |
Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email. |