Skip to content
OpenAdvisories

Archive

16 June 2015

Vulnerabilities first published on this day (UTC), newest first.

← May 2015 2015 / June /16 July 2015 →
  1. 125
  2. 219
  3. 38
  4. 47
  5. 57
  6. 6 
  7. 716
  8. 814
  9. 926
  10. 1070
  11. 117
  12. 1216
  13. 1322
  14. 14 
  15. 1567
  16. 1615
  17. 1719
  18. 1816
  19. 1911
  20. 204
  21. 21 
  22. 2210
  23. 2316
  24. 2427
  25. 253
  26. 2611
  27. 272
  28. 2825
  29. 293
  30. 3029
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2015-4374

    Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x be…

  • Unscored —
    CVE-2015-4398

    Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7 for Drup…

  • Unscored —
    CVE-2015-4610

    SQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3 allows remote authenticated…

  • Unscored —
    CVE-2015-4613

    SQL injection vulnerability in the backend module in the Developer Log (devlog) extension before 2.11.4 for TYPO3 allow…

  • Unscored —
    CVE-2015-4607

    Unrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and earlier for TYPO3 all…

  • Unscored —
    CVE-2015-4608

    Cross-site scripting (XSS) vulnerability in the BE User Log (beko_beuserlog) extension 1.1.1 and earlier for TYPO3 allo…

  • Unscored —
    CVE-2015-4609

    SQL injection vulnerability in the wt_directory extension before 1.4.2 for TYPO3 allows remote authenticated users to e…

  • Unscored —
    CVE-2015-4611

    SQL injection vulnerability in the Smoelenboek (ncgov_smoelenboek) extension before 1.0.9 for TYPO3 allows remote authe…

  • Unscored —
    CVE-2015-4606

    Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3, when using Apache wi…

  • Unscored —
    CVE-2015-4612

    SQL injection vulnerability in the "FAQ - Frequently Asked Questions" (js_faq) extension before 1.2.1 for TYPO3 allows …

  • Medium 4.0
    CVE-2015-3010

    ceph-deploy allows local users to obtain sensitive information by reading the file

    ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

    ceph-deploy PyPI
  • Unscored —
    CVE-2015-3395

    The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x b…

    chromium-browser ffmpeg libav Debian Ubuntu
  • Unscored —
    CVE-2015-3205 Public exploit EPSS 11%

    libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file,…

  • Unscored —
    CVE-2015-2804

    The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before…

  • Unscored —
    CVE-2015-2805 Public exploit

    Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web in…