Archive
April 2015
Vulnerabilities first published in this month (UTC), newest first.
538 results · Feed
-
Unscored —
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when t…
-
Unscored —CVE-2015-3145 EPSS 30%
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which…
-
Unscored —CVE-2015-3144 EPSS 11%
The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows …
-
Unscored —CVE-2015-3143 EPSS 11%
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to conn…
-
Unscored —CVE-2015-3148 EPSS 14%
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote …
-
Unscored —CVE-2011-4403 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the auth…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inje…
-
Unscored —CVE-2012-5451 Public exploit
Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to i…
-
Unscored —
Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management C…
-
Unscored —
Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Cent…
-
Unscored —
The Certify module before 6.x-2.3 for Drupal does not properly perform node access checks, which allows remote authenti…
-
Unscored —
The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass int…
-
Unscored —
Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 an…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unifie…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Node basket module for Drupal allows remote authenticated users to inje…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authentica…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Commerce Balanced Payments module for Drupal allows remote attac…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Tools module before 7.x-1.4 for Drupal allow remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Bank Account Listing Page in the Commerce Balanced Payments module for …
-
Unscored —
Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Node Access Product module for Drupal allows remote authenticated users…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Node basket module for Drupal allow remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ajax Timeline module before 7.x-1.1 for Drupal allows remote authentica…
-
Unscored —
Open redirect vulnerability in the Commerce WeDeal module before 7.x-1.3 for Drupal allows remote attackers to redirect…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Feature Set module for Drupal allow remote attackers …
-
Unscored —
Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 fo…
-
Unscored —
The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions an…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Download counts report page in the Public Download Count module (pubdlc…
-
Unscored —
The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly rest…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated us…
-
Unscored —
The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and Wi…
-
High —
Improper Input Validation in Drools and jBPM
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.
-
Unscored —
Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which a…
-
Unscored —CVE-2015-0135 EPSS 40%
IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or c…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Corner module for Drupal allow remote attackers to hi…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x befo…