CVE-2015-1839

CVSS v3 Score
5.3
Medium
CVSS v2 Score
4.6
Medium

Vulnerability Description

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

CVSS:5.3(Medium)

modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

CWE-192015
CVSS:5.3(Medium)

The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attacker...

CWE-192015
CVSS:5.3(Medium)

A vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated, remote attacker to send unsolicited email messages, aka a Mail Relay Vulnerability. The vulnerability is due...

CWE-192018
CVSS:5.3(Medium)

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deano...

CWE-192019
CVSS:5.4(Medium)

WebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by operating a crafted captive portal.

CWE-192016
CVSS:5.4(Medium)

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing Vulnerability'. This CVE ID is unique...

CWE-192019