Archive
15 June 2015
Vulnerabilities first published on this day (UTC), newest first.
67 results · Feed
-
Unscored —
GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local gue…
-
Unscored —
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a messa…
-
Unscored —
The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV gue…
-
Unscored —
The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 …
-
Unscored —
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attack…
-
Unscored —
The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More…
-
Unscored —
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment i…
-
Unscored —CVE-2015-4119 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hija…
-
Unscored —CVE-2015-4118 Public exploit
SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated use…
-
Unscored —
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, whe…
-
Unscored —
The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cau…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfe…
-
Unscored —
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6 for Drupal allows remot…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hij…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7…
-
Unscored —
The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction a…
-
Unscored —
Open redirect vulnerability in the finder_form_goto function in the Finder module for Drupal allows remote attackers to…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Dr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 fo…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hija…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated use…
-
Unscored —
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Dr…
-
Unscored —
The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in plaintext when the "Ask user …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack th…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in includes/campaignmonitor_lists.admin.inc in the Campaign …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticate…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users …
-
Unscored —
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x befo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x be…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x bef…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages in the EntityBulkDelete module …
-
Unscored —
The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player admini…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Dru…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote auth…
-
Unscored —
The Open Graph Importer (og_tag_importer) 7.x-1.x for Drupal does not properly check the create permission for content …