21 April 2015

64 results · Feed

• Unscored —
  CVE-2015-3363

  Cross-site request forgery (CSRF) vulnerability in the Contact Form Fields module before 6.x-2.3 for Drupal allows remo…

  Apr 21, 2015
• Unscored —
  CVE-2015-3358

  Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to redirec…

  Apr 21, 2015
• Unscored —
  CVE-2015-3366

  Cross-site request forgery (CSRF) vulnerability in the Alfresco module before 6.x-1.3 for Drupal allows remote attacker…

  Apr 21, 2015
• Unscored —
  CVE-2015-3347

  Cross-site request forgery (CSRF) vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Dru…

  Apr 21, 2015
• Unscored —
  CVE-2015-3369

  Cross-site scripting (XSS) vulnerability in the Taxonews module before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal al…

  Apr 21, 2015
• Unscored —
  CVE-2015-3362

  Cross-site scripting (XSS) vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG p…

  Apr 21, 2015
• Unscored —
  CVE-2015-3342

  Open redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal allows remote attacker…

  Apr 21, 2015
• Unscored —
  CVE-2015-3351

  Multiple cross-site request forgery (CSRF) vulnerabilities in the Log Watcher module before 6.x-1.2 for Drupal allow re…

  Apr 21, 2015
• Unscored —
  CVE-2015-3372

  Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote authenticate…

  Apr 21, 2015
• Unscored —
  CVE-2015-3348

  Cross-site scripting (XSS) vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Drupal all…

  Apr 21, 2015
• Unscored —
  CVE-2015-3376

  Cross-site scripting (XSS) vulnerability in the Quizzler module before 7-x.1.16 for Drupal allows remote authenticated …

  Apr 21, 2015
• Unscored —
  CVE-2015-3349

  Multiple cross-site request forgery (CSRF) vulnerabilities in the Htaccess module before 7.x-2.3 for Drupal allow remot…

  Apr 21, 2015
• Unscored —
  CVE-2015-3350

  Cross-site request forgery (CSRF) vulnerability in the Todo Filter module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for…

  Apr 21, 2015
• Unscored —
  CVE-2015-3360

  Cross-site scripting (XSS) vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated…

  Apr 21, 2015
• Unscored —
  CVE-2015-3361

  Cross-site scripting (XSS) vulnerability in the Linkit module before 7.x-2.7 and 7.x-3.x before 7.x-3.3 for Drupal, whe…

  Apr 21, 2015
• Unscored —
  CVE-2014-9718

  The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretati…

  qemu qemu Debian Ubuntu
  Apr 21, 2015
• Unscored —
  CVE-2015-2825 Public exploit EPSS 14%

  Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPre…

  Apr 21, 2015
• Unscored —
  CVE-2014-5361

  Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote att…

  Apr 21, 2015
• Unscored —
  CVE-2014-5370 Public exploit

  Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDr…

  Apr 21, 2015
• High 7.8
  CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

  Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

  Apr 21, 2015

  KEV Mar 3, 2022
• Unscored —
  CVE-2015-2041

  net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows lo…

  linux linux linux-lts-utopic Debian Ubuntu
  Apr 21, 2015
• Unscored —
  CVE-2015-2042

  net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local user…

  linux linux linux-lts-utopic Debian Ubuntu
  Apr 21, 2015
• Unscored —
  CVE-2015-0702

  Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.…

  Apr 21, 2015
• Unscored —
  CVE-2015-0703

  Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified MeetingPlace 8.6(1.9) all…

  Apr 21, 2015