Archive

26 January 2015

Vulnerabilities first published on this day (UTC), newest first.

← December 2014 2015 / January /26 February 2015 →

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

Unscored —

CVE-2015-1179

Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier al…

Jan 26, 2015
Unscored —

CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package.

Jan 26, 2015
Unscored —

CVE-2015-1178

Multiple cross-site scripting (XSS) vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to i…

Jan 26, 2015
Unscored —

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently…

Jan 26, 2015
Unscored —

CVE-2014-8157 EPSS 17%

Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a d…

jasper Ubuntu

Jan 26, 2015
Unscored —

CVE-2014-8158 EPSS 14%

Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a den…

jasper Ubuntu

Jan 26, 2015
Unscored —

CVE-2014-8148

The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signal…

midgard2-core Ubuntu

Jan 26, 2015
Unscored —

CVE-2014-9571

Cross-site scripting (XSS) vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 a…

Jan 26, 2015
Unscored —

CVE-2014-9572

MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 does not properly restrict access to /*/install.php, which allows …

Jan 26, 2015
Unscored —

CVE-2014-9573

SQL injection vulnerability in manage_user_page.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remo…

Jan 26, 2015