16 February 2015

20 results · Feed

• Medium 5.5
  CVE-2015-0260

  RhodeCode and Kallithea are vulnerable to sensitive information disclosure

  RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

  kallithea rhodecode PyPI
  Feb 16, 2015
• Unscored —
  CVE-2015-0268

  The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt con…

  Feb 16, 2015
• Unscored —
  CVE-2015-1501

  The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (…

  Feb 16, 2015
• Unscored —
  CVE-2015-1613

  RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1)…

  rhodecode PyPI
  Feb 16, 2015
• Unscored —
  CVE-2015-1498

  Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote at…

  Feb 16, 2015
• Unscored —
  CVE-2015-1499

  The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, an…

  Feb 16, 2015
• Unscored —
  CVE-2015-1496

  Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerSe…

  Feb 16, 2015
• Unscored —
  CVE-2015-1434

  Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary…

  Feb 16, 2015
• Unscored —
  CVE-2015-1497 Public exploit EPSS 74%

  radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to exec…

  Feb 16, 2015
• Unscored —
  CVE-2015-1500

  Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (…

  Feb 16, 2015
• Unscored —
  CVE-2015-1495

  Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a cr…

  Feb 16, 2015
• Unscored —
  CVE-2015-1436

  Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attacke…

  Feb 16, 2015
• Unscored —
  CVE-2015-1435

  Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary we…

  Feb 16, 2015
• Unscored —
  CVE-2014-9375

  Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remot…

  Feb 16, 2015
• Unscored —
  CVE-2015-1608

  Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access to database-connection …

  Feb 16, 2015
• Unscored —
  CVE-2015-0609

  Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE)…

  Feb 16, 2015
• Unscored —
  CVE-2015-1474 Public exploit

  Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer…

  Feb 16, 2015
• Medium —
  CVE-2014-0227 EPSS 21%

  Improper Input Validation in Apache Tomcat

  java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to …

  org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  Feb 16, 2015
• Unscored —
  CVE-2014-6113

  Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.122…

  Feb 16, 2015
• Unscored —
  CVE-2014-6137 Public exploit

  Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.122…

  Feb 16, 2015