Archive
June 2015
Vulnerabilities first published in this month (UTC), newest first.
495 results · Feed
-
Unscored —
Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote atta…
-
Unscored —
Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a de…
-
Unscored —CVE-2015-3001 Public exploit
SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which a…
-
Unscored —
Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to…
-
Unscored —CVE-2015-3000 Public exploit
SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a la…
-
Unscored —CVE-2015-2999 Public exploit
Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary…
-
Unscored —
SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accoun…
-
Unscored —
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote a…
-
Unscored —
Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitra…
-
Unscored —
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators …
-
Unscored —
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers …
-
Unscored —
SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sens…
-
Unscored —
SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the …
-
Unscored —
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 1…
-
Unscored —
The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel throu…
-
Unscored —
The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which al…
-
Unscored —
Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in …
-
Unscored —
drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain …
-
High —CVE-2014-0230 EPSS 20%
Uncontrolled Resource Consumption in Apache Tomcat
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread co…
-
Medium —CVE-2014-7810 EPSS 13%
Improper Access Control in Apache Tomcat
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypa…
-
Unscored —
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration …
-
Unscored —
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration …
-
Unscored —
CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 device…
-
Unscored —
Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified co…
-
Unscored —
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF…
-
Unscored —CVE-2015-2125 Public exploit
Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to b…
-
Unscored —
Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8…
-
Unscored —
IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to h…
-
Unscored —
Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 (aka SStreamVideo) ActiveX …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hi…
-
Unscored —
Directory traversal vulnerability in the Brandon Bowles Open Explorer application before 0.254 Beta for Android allows …
-
Unscored —
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
-
Unscored —
Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allo…
-
Unscored —
Beckwith Electric M-6200 Digital Voltage Regulator Control with firmware before D-0198V04.07.00, M-6200A Digital Voltag…
-
Unscored —
Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers …
-
Unscored —
Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center compon…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9…