Skip to content
OpenAdvisories

Archive

September 2015

Vulnerabilities first published in this month (UTC), newest first.

← August 2015 2015 / September October 2015 →
  1. 114
  2. 26
  3. 326
  4. 412
  5. 57
  6. 69
  7. 73
  8. 87
  9. 954
  10. 10 
  11. 1123
  12. 12 
  13. 13 
  14. 1413
  15. 158
  16. 1618
  17. 1715
  18. 18113
  19. 19 
  20. 2026
  21. 2119
  22. 2226
  23. 23 
  24. 2430
  25. 2517
  26. 26 
  27. 27 
  28. 2831
  29. 2916
  30. 30 
All Critical High Medium Low Exploited only Public exploit

62 results · Clear filters · Feed

  • Unscored —
    CVE-2015-7602 Public exploit EPSS 62%

    Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (…

  • Unscored —
    CVE-2015-7603 Public exploit EPSS 61%

    Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2015-7601 Public exploit EPSS 59%

    Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ../…

  • Unscored —
    CVE-2015-5074 Public exploit

    Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php…

  • Unscored —
    CVE-2015-5075 Public exploit

    Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the auth…

  • Unscored —
    CVE-2015-3203 Public exploit

    Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploa…

  • Unscored —
    CVE-2015-7387 Public exploit EPSS 80%

    ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restriction…

  • Unscored —
    CVE-2015-5082 Public exploit EPSS 70%

    Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NE…

  • Unscored —
    CVE-2015-7382 Public exploit

    SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attacker…

  • Unscored —
    CVE-2015-7381 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6…

  • Unscored —
    CVE-2015-6008 Public exploit

    install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands…

  • Unscored —
    CVE-2015-6009 Public exploit

    Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to …

  • Unscored —
    CVE-2015-6305 Public exploit

    Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConn…

  • Unscored —
    CVE-2015-6306 Public exploit

    Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions,…

  • Unscored —
    CVE-2015-7309 Public exploit EPSS 39%

    The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authen…

  • Unscored —
    CVE-2015-5574 Public exploit EPSS 46%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-5568 Public exploit EPSS 20%

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, A…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-6923 Public exploit

    The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary ph…

  • Unscored —
    CVE-2015-5603 Public exploit EPSS 59%

    The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Jav…

  • Unscored —
    CVE-2015-7243 Public exploit EPSS 58%

    Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibl…

  • Unscored —
    CVE-2015-5895 Public exploit

    Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and …

  • Unscored —
    CVE-2015-7235 Public exploit

    Multiple SQL injection vulnerabilities in dex_reservations.php in the CP Reservation Calendar plugin before 1.1.7 for W…

  • Unscored —
    CVE-2015-4040 Public exploit

    Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 …

  • Unscored —
    CVE-2015-6962 Public exploit

    SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2015-6973 Public exploit EPSS 65%

    Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to…

  • Unscored —
    CVE-2015-6972 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to inject…

  • Unscored —
    CVE-2015-3623 Public exploit EPSS 16%

    XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct serve…

  • Unscored —
    CVE-2015-5465 Public exploit

    Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allo…

  • Unscored —
    CVE-2015-6965 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for W…

  • Unscored —
    CVE-2015-6967 Public exploit EPSS 49%

    Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators t…

  • Unscored —
    CVE-2015-6945 Public exploit

    Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2015-6944 Public exploit

    Cross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the …

  • Medium —
    CVE-2015-6830 Public exploit EPSS 10%

    phpMyAdmin ReCaptcha bypass

    libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct resp…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2015-6912 Public exploit EPSS 12%

    Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharac…

  • Unscored —
    CVE-2015-6911 Public exploit

    SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2015-6908 Public exploit EPSS 19%

    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a d…

    openldap openldap Debian Ubuntu
  • Unscored —
    CVE-2014-9208 Public exploit

    Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacke…

  • Unscored —
    CVE-2015-6827 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentic…

  • Unscored —
    CVE-2015-2510 Public exploit EPSS 36%

    Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 …

  • Unscored —
    CVE-2015-2520 Public exploit EPSS 28%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer …