Skip to content
OpenAdvisories

Archive

15 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /15 February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

38 results · Feed

  • Unscored —
    CVE-2014-9596

    Panasonic Arbitrator Back-End Server (BES) MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is en…

  • Unscored —
    CVE-2015-0588

    Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote …

  • Unscored —
    CVE-2015-0591

    Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang…

  • Unscored —
    CVE-2014-7881

    Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2014-8022

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject …

  • Unscored —
    CVE-2014-8904 Public exploit

    lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGC…

  • Unscored —
    CVE-2014-8034

    Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for r…

  • Unscored —
    CVE-2015-0552

    Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remot…

    gcab Debian
  • Unscored —
    CVE-2015-1051

    Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows rem…

  • Unscored —
    CVE-2015-1052

    Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to …

  • Medium 5.3
    CVE-2015-1039

    ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect

    Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.

    zf-commons/zfc-user Packagist
  • Unscored —
    CVE-2015-1040

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenti…

  • Unscored —
    CVE-2015-1041

    Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows remote attackers to inject …

  • Unscored —
    CVE-2015-1050

    Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6 allows remote atta…

  • Unscored —
    CVE-2014-0171

    XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualiza…

  • Unscored —
    CVE-2014-7812

    Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote au…

  • Unscored —
    CVE-2014-7811

    Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow…

  • Unscored —
    CVE-2014-7956

    Cross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject …

  • Unscored —
    CVE-2014-7957

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote att…

  • Unscored —
    CVE-2014-8395

    Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL …

  • Unscored —
    CVE-2014-8396

    Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hi…

  • Unscored —
    CVE-2014-8394

    Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduc…

  • Unscored —
    CVE-2014-8397

    Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary co…

  • Unscored —
    CVE-2014-8151

    The darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, when using the Darw…

  • Unscored —
    CVE-2014-8150

    CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attacker…

    curl curl Debian Ubuntu
  • Unscored —
    CVE-2014-8869

    Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wb…

  • Unscored —
    CVE-2014-8870

    Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 …

  • Unscored —
    CVE-2014-8153

    The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to…

  • Unscored —
    CVE-2014-8398

    Multiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute arbitrary code and condu…

  • Unscored —
    CVE-2014-8738

    The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers t…

    binutils binutils binutils-mingw-w64 Debian Ubuntu
  • Unscored —
    CVE-2014-9593

    Apache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private keys via a listSslCerts…

  • Unscored —
    CVE-2014-9308 Public exploit EPSS 51%

    Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka Wo…

  • Unscored —
    CVE-2014-9587

    Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to …

    roundcube Debian
  • Unscored —
    CVE-2014-9594

    Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated u…

  • Unscored —
    CVE-2014-9561

    Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to inject …

  • Unscored —
    CVE-2014-9570

    Multiple cross-site scripting (XSS) vulnerabilities in the MyWebsiteAdvisor Simple Security plugin 1.1.5 and earlier fo…

  • Unscored —
    CVE-2014-9560

    SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2014-9595

    Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated u…