2 June 2015

19 results · Feed

• Unscored —
  CVE-2015-0759

  Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attack…

  Jun 2, 2015
• Unscored —
  CVE-2015-0850

  The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified param…

  Jun 2, 2015
• Unscored —
  CVE-2015-1945

  Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.…

  Jun 2, 2015
• Unscored —
  CVE-2015-4094

  The Thycotic Password Manager Secret Server application through 2.3 for iOS does not verify X.509 certificates from SSL…

  Jun 2, 2015
• Unscored —
  CVE-2015-4160

  SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via …

  Jun 2, 2015
• Unscored —
  CVE-2015-4159

  SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQ…

  Jun 2, 2015
• Medium —
  CVE-2015-4050 Scanner template

  Symfony Incorrect Access Control

  FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the _controller attribute is set, which allows remote attack…

  symfony/symfony symfony symfony/http-kernel Debian Packagist
  Jun 2, 2015
• Unscored —
  CVE-2015-4155

  GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local…

  parallel parallel Debian Ubuntu
  Jun 2, 2015
• Unscored —
  CVE-2015-4158

  SAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination) via unspecified vecto…

  Jun 2, 2015
• Unscored —
  CVE-2015-4156

  GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write t…

  parallel parallel Debian Ubuntu
  Jun 2, 2015
• Unscored —
  CVE-2015-4162

  XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.…

  Jun 2, 2015
• Unscored —
  CVE-2015-4161

  SAP Afaria does not properly restrict access to unspecified functionality, which allows remote attackers to obtain sens…

  Jun 2, 2015
• Unscored —
  CVE-2015-4157

  SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, …

  Jun 2, 2015
• High 7.5
  CVE-2015-3982

  Django allows user sessions hijacking via an empty string in the session key

  The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.

  django PyPI
  Jun 2, 2015
• Unscored —
  CVE-2015-2278

  The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6,…

  Jun 2, 2015
• Medium —
  CVE-2015-2944

  Improper Neutralization of Input During Web Page Generation in Apache Sling

  Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlRespon…

  org.apache.sling:org.apache.sling.servlets.post org.apache.sling:org.apache.sling.api Maven
  Jun 2, 2015
• Unscored —
  CVE-2015-2282

  Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.…

  Jun 2, 2015
• Unscored —
  CVE-2014-0999 Public exploit

  Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitiv…

  Jun 2, 2015
• Unscored —
  CVE-2014-8391 Public exploit

  The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to …

  Jun 2, 2015