Skip to content
OpenAdvisories

Archive

19 June 2015

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to in…

  • Unscored —

    The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP co…

  • Unscored —

    SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL comm…

  • Unscored —
    CVE-2015-4677 Public exploit

    Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hija…

  • Unscored —

    Buffer overflow in the Tiny SRP library (aka TinySRP) allows remote attackers to cause a denial of service (crash) or p…

  • Unscored —

    SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ca…

  • Unscored —

    Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5…

  • Unscored —
    CVE-2015-2797 Public exploit EPSS 78%

    Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 50…

  • Unscored —

    Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET …

  • Unscored —

    Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service (ipv6_io service reload) via a malformed IPv6 p…

  • Unscored —

    The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login…