Skip to content
OpenAdvisories

Archive

4 September 2015

Vulnerabilities first published on this day (UTC), newest first.

← August 2015 2015 / September /4 October 2015 →
  1. 114
  2. 26
  3. 326
  4. 412
  5. 57
  6. 69
  7. 73
  8. 87
  9. 954
  10. 10 
  11. 1123
  12. 12 
  13. 13 
  14. 1413
  15. 158
  16. 1618
  17. 1715
  18. 18113
  19. 19 
  20. 2026
  21. 2119
  22. 2226
  23. 23 
  24. 2430
  25. 2517
  26. 26 
  27. 27 
  28. 2831
  29. 2916
  30. 30 
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2015-6812

    Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.0.12.1 allows remo…

  • Unscored —
    CVE-2015-6807

    Cross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 f…

  • Unscored —
    CVE-2015-6809 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2015-6811 Public exploit

    SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earli…

  • Unscored —
    CVE-2015-6810 Public exploit

    Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB,…

  • Unscored —
    CVE-2015-6808

    Cross-site scripting (XSS) vulnerability in the Spotlight module 7.x-1.x before 7.x-1.5 for Drupal allows remote authen…

  • Medium —
    CVE-2015-5612

    October CMS XSS In Caption Tag of Profile

    Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via the caption tag of a profile image.

    october/october Packagist
  • High —
    CVE-2015-5688 Scanner template

    Directory Traversal in geddy

    Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

    geddy npm
  • Unscored —
    CVE-2014-9605 Public exploit

    WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass au…

  • Unscored —
    CVE-2015-4538

    The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated users to read arbitra…

  • Unscored —
    CVE-2015-4544

    EMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify authorization for dm_job o…

  • Unscored —
    CVE-2015-6259

    The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS …