Skip to content
OpenAdvisories

Archive

20 September 2015

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) applianc…

  • Unscored —

    The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote …

  • Unscored —

    The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote …

  • Unscored —

    ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec …

  • Unscored —

    admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0…

  • Unscored —

    The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (S…

  • Unscored —

    Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protectio…

  • Unscored —

    Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12…

  • Unscored —

    sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a…

  • Unscored —

    The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whit…

  • Unscored —

    The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism…

  • Unscored —

    The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist …

  • Unscored —

    The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL white…

  • Unscored —

    The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attac…

  • Unscored —

    The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a UR…

  • Unscored —

    Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(…

  • Unscored —

    The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial o…

  • Unscored —

    Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of servic…

  • Unscored —

    Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15) allows remote authenticated users to cause a denial …

  • Unscored —

    SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authentic…

  • Unscored —

    Directory traversal vulnerability in H2O before 1.4.5 and 1.5.x before 1.5.0-beta2, when the file.dir directive is enab…

  • Unscored —

    The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to byp…

  • Unscored —

    The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to byp…

  • Unscored —

    The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to byp…

  • Unscored —

    The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass int…