Skip to content
OpenAdvisories

Archive

January 2015

Vulnerabilities first published in this month (UTC), newest first.

← December 2014 2015 / January February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

124 results · Clear filters · Feed

  • Unscored —
    CVE-2015-1060 Public exploit

    Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect…

  • Unscored —
    CVE-2015-1059 Public exploit

    Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execut…

  • Unscored —
    CVE-2015-1057 Public exploit

    Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2015-1058 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2015-1054 Public exploit

    Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to i…

  • Unscored —
    CVE-2014-8904 Public exploit

    lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGC…

  • Unscored —
    CVE-2014-9308 Public exploit EPSS 51%

    Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka Wo…

  • Unscored —
    CVE-2014-8636 Public exploit EPSS 64%

    The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with…

    firefox Ubuntu
  • Unscored —
    CVE-2015-0006 Public exploit EPSS 12%

    The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 20…

  • Unscored —
    CVE-2015-0004 Public exploit

    The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2…

  • High 7.8
    CVE-2015-0016 Exploited Public exploit EPSS 76%

    Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

    KEV May 25, 2022
  • Unscored —
    CVE-2015-0002 Public exploit EPSS 14%

    The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1…

  • Unscored —
    CVE-2014-100031 Public exploit

    Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2014-100013 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2014-100014 Public exploit

    Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to…

  • Unscored —
    CVE-2014-100029 Public exploit

    Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote att…

  • Unscored —
    CVE-2014-100039 Public exploit

    mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a …

  • Unscored —
    CVE-2014-100012 Public exploit

    SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2014-100020 Public exploit

    SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-100015 Public exploit EPSS 57%

    Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write …

  • Unscored —
    CVE-2014-100030 Public exploit

    Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remo…

  • Unscored —
    CVE-2014-100011 Public exploit

    SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2014-100017 Public exploit

    Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2014-10032 Public exploit

    SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arb…

  • Unscored —
    CVE-2014-10038 Public exploit

    SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2014-10034 Public exploit

    Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execu…

  • Unscored —
    CVE-2014-10035 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administra…

  • Unscored —
    CVE-2014-10031 Public exploit

    Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2014-10037 Public exploit Scanner template EPSS 19%

    Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .…

  • Unscored —
    CVE-2014-10033 Public exploit

    SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.…

  • Unscored —
    CVE-2014-100002 Public exploit EPSS 60%

    Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read ar…

  • High 8.0
    CVE-2014-100005 Exploited Public exploit EPSS 43%

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17…

    KEV May 16, 2024
  • Unscored —
    CVE-2014-100003 Public exploit

    SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for Wo…

    Web / CMS
  • Unscored —
    CVE-2014-10015 Public exploit

    SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to ex…

  • Unscored —
    CVE-2014-10009 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2014-10013 Public exploit

    SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to…

    Web / CMS
  • Unscored —
    CVE-2014-10008 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authen…

  • Unscored —
    CVE-2014-10023 Public exploit

    Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2014-10001 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacke…

  • Unscored —
    CVE-2014-10021 Public exploit EPSS 59%

    Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remot…