Archive
June 2015
Vulnerabilities first published in this month (UTC), newest first.
495 results · Feed
-
Unscored —
Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service …
-
Unscored —
telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of s…
-
Unscored —
The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.…
-
Unscored —
The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V d…
-
Unscored —
Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU c…
-
Unscored —
The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote…
-
Unscored —
Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashb…
-
Unscored —
The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authen…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers t…
-
Unscored —
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n,…
-
Unscored —CVE-2015-1789 EPSS 76%
The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1…
-
Unscored —
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n…
-
Unscored —
The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.…
-
Unscored —
Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0…
-
Unscored —CVE-2014-8176 EPSS 17%
The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h…
-
Unscored —
Off-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a d…
-
Unscored —
Multiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow remote attackers to cau…
-
Unscored —
The chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which al…
-
Unscored —
Off-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote attackers to cause a denial …
-
Unscored —
The chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote at…
-
Unscored —
Off-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote attackers to cause a denial o…
-
Unscored —
The cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain decompression callbacks in certa…
-
Unscored —
strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hi…
-
Unscored —CVE-2015-4465 Public exploit
Cross-site scripting (XSS) vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remot…
-
Unscored —
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attac…
-
Unscored —
Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder p…
-
Unscored —CVE-2014-8607 Public exploit
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command li…
-
Unscored —CVE-2014-8604 Public exploit
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in t…
-
Unscored —CVE-2014-8606 Public exploit
Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote adminis…
-
Unscored —CVE-2014-8603 Public exploit
cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to ex…
-
Unscored —CVE-2014-8605 Public exploit
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under …
-
Unscored —
Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attacke…
-
Medium —
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.…
-
Unscored —CVE-2015-1757 EPSS 11%
Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Window…
-
Unscored —CVE-2015-1754 EPSS 16%
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2015-1687 EPSS 13%
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …
-
Unscored —
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privil…