Skip to content
OpenAdvisories

Archive

3 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /3 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2015-0929

    time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attac…

  • Unscored —
    CVE-2015-0930

    The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative…

  • Unscored —
    CVE-2015-0599

    The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Se…

  • Unscored —
    CVE-2015-1469

    time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote aut…

  • Unscored —
    CVE-2014-8013

    The TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service (device…

  • Unscored —
    CVE-2014-8021

    Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco H…

  • Unscored —
    CVE-2015-1384

    Cross-site scripting (XSS) vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote at…

  • Unscored —
    CVE-2015-1458

    Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /t…

  • Unscored —
    CVE-2015-1382

    parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via ve…

    privoxy Debian
  • Unscored —
    CVE-2015-1428 Public exploit

    Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2015-1459

    Cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2015-1456

    Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote adminis…

  • Unscored —
    CVE-2015-1455

    Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the ww…

  • Unscored —
    CVE-2015-1404

    Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows rem…

  • Unscored —
    CVE-2015-1405

    SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers…

  • Unscored —
    CVE-2015-1402

    Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote atta…

  • Unscored —
    CVE-2015-1462

    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "he…

    clamav clamav Debian Ubuntu
  • Unscored —
    CVE-2015-1461

    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew pac…

    clamav clamav Debian Ubuntu
  • Unscored —
    CVE-2015-1457

    Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.

  • Unscored —
    CVE-2015-1403

    SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to exec…

  • Unscored —
    CVE-2015-1400 Public exploit

    SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2015-1433

    program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote …

    roundcube Debian
  • Unscored —
    CVE-2015-1348

    Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote a…

  • Unscored —
    CVE-2015-1380

    jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded…

    privoxy Debian
  • Unscored —
    CVE-2015-1441

    SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers …

  • Unscored —
    CVE-2015-1463

    ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, rel…

    clamav clamav Debian Ubuntu
  • Unscored —
    CVE-2015-1460

    Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted…

  • Unscored —
    CVE-2015-1381

    Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of ser…

    privoxy Debian
  • Unscored —
    CVE-2014-8779

    Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-…

  • Unscored —
    CVE-2014-9574

    Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute …

  • Unscored —
    CVE-2014-9559

    Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2014-9556

    Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service …

    libmspack libmspack cabextract cabextract Debian Ubuntu
  • Unscored —
    CVE-2014-9328

    ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "…

    clamav clamav Debian Ubuntu
  • Low —
    CVE-2014-9568

    puppetlabs-rabbitmq allows local users to obtain sensitive information

    puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.

    puppetlabs-rabbitmq Hex
  • Unscored —
    CVE-2014-9633 Public exploit

    The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device h…

  • Unscored —
    CVE-2014-5360

    Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remot…