Archive
11 September 2015
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier f…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows re…
-
Unscored —CVE-2015-6920 Scanner template
Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the googleSearch (CSE) (com_googlesearch_cse) component 3.0.2 for Joomla! a…
-
Unscored —
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a deni…
-
Unscored —
The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenti…
-
Unscored —
Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station bef…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-…
-
Unscored —
The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated user…
-
Unscored —CVE-2015-6911 Public exploit
SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a fu…
-
Unscored —
SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL …
-
Unscored —
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a d…
-
Unscored —
SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute ar…
-
Unscored —
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in Synology Download Sta…
-
Unscored —
SMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to obtain access via unspeci…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers…
-
Unscored —CVE-2014-9208 Public exploit
Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacke…
-
Unscored —CVE-2015-6827 Public exploit
Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentic…
-
High —
DataTable Vulnerable to Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.