Archive
August 2015
Vulnerabilities first published in this month (UTC), newest first.
619 results · Feed
-
Unscored —
Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenti…
-
Unscored —
Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows rem…
-
Unscored —
The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote a…
-
Unscored —
Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privilege…
-
Unscored —
Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang)…
-
Unscored —
Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attac…
-
Unscored —
SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arb…
-
High 7.5
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsn…
-
Medium 6.5
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.
-
Unscored —
The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system polic…
-
Unscored —
Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect …
-
High 8.8
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
KEV Apr 13, 2022 -
Unscored —CVE-2015-4425 Public exploit
Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" perm…
-
Unscored —
SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlTool…
-
Unscored —CVE-2015-6519 Public exploit
SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemai…
-
Unscored —CVE-2015-6518 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2015-6517 Public exploit
Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authenticatio…
-
Unscored —
The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain…
-
Unscored —
Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authe…
-
Unscored —
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify c…
-
Unscored —
The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allo…
-
Unscored —
The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not p…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows rem…
-
Unscored —
The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user regist…
-
Unscored —
The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for chang…
-
Unscored —
The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access V…
-
Unscored —
The Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to Storage API fields attach…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui s…
-
Unscored —
The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked…
-
Unscored —
The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overvie…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certa…
-
Unscored —
Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Video Consultation module for Drupal allows remote attackers to inject …
-
Unscored —
The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not reb…