Archive
18 August 2015
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —CVE-2015-4425 Public exploit
Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" perm…
-
Unscored —
SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlTool…
-
Unscored —CVE-2015-6519 Public exploit
SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemai…
-
Unscored —CVE-2015-6518 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2015-6517 Public exploit
Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authenticatio…
-
Unscored —
The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain…
-
Unscored —
Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authe…
-
Unscored —
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify c…
-
Unscored —
The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allo…
-
Unscored —
The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not p…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows rem…
-
Unscored —
The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user regist…
-
Unscored —
The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for chang…
-
Unscored —
The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access V…
-
Unscored —
The Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to Storage API fields attach…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui s…
-
Unscored —
The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked…
-
Unscored —
The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overvie…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certa…
-
Unscored —
Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Video Consultation module for Drupal allows remote attackers to inject …
-
Unscored —
The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not reb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remo…
-
Unscored —
The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x bef…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for …
-
Unscored —
SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execut…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal To…
-
Unscored —
The HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not …
-
Unscored —
The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attacker…
-
Unscored —
Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers…
-
Unscored —CVE-2015-4029 EPSS 20%
Cross-site scripting (XSS) vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4 and Splunk Light 6.2.…