Skip to content
OpenAdvisories

Archive

26 June 2015

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation o…

  • Unscored —

    content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly cons…

  • Unscored —

    bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creati…

  • Unscored —

    The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does no…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS …

  • Unscored —
    CVE-2015-1158 Public exploit EPSS 30%

    The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-v…

  • Unscored —

    The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and…

  • Unscored —

    Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted pass…

  • Unscored —

    Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands…

  • Unscored —

    SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authen…

  • Unscored —

    The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and…