Archive
9 June 2015
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —CVE-2015-4022 EPSS 20%
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x befo…
-
Unscored —
The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not…
-
Unscored —CVE-2015-4026 EPSS 19%
The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname up…
-
Unscored —CVE-2015-4021 EPSS 20%
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 doe…
-
Unscored —CVE-2015-4025 EPSS 17%
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character …
-
Unscored —CVE-2015-4147 EPSS 12%
The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does…
-
Unscored —CVE-2015-4024 EPSS 42%
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5…
-
Unscored —
The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 a…
-
Unscored —CVE-2015-3330 EPSS 13%
The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x bef…
-
Unscored —CVE-2015-3329 EPSS 38%
Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x bef…
-
Unscored —
ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sen…
-
Unscored —CVE-2015-4010 Public exploit
Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows re…
-
Unscored —
Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System …
-
Unscored —
The Kankun Smart Socket device and mobile application uses a hardcoded AES 256 bit key, which makes it easier for remot…
-
Unscored —
Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.
-
Unscored —
provider/server/ECServer.cpp in Zarafa Collaboration Platform (ZCP) before 7.1.13 and 7.2.x before 7.2.1 allows local u…
-
Unscored —CVE-2015-3648 Scanner template
Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote att…
-
Unscored —CVE-2015-3624 Public exploit
Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content…
-
Unscored —
mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authenticat…
-
Unscored —CVE-2014-7872 Public exploit
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privilege…
-
Unscored —
Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which m…
-
Unscored —
Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to in…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attacker…
-
Unscored —
The Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier, WHR-300HP2 1.60 and e…