Archive
September 2015
Vulnerabilities first published in this month (UTC), newest first.
493 results · Feed
-
Unscored —
Unspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 through 7.0.0.9 allows remote authenticated users to obtain…
-
Unscored —
The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of ser…
-
Unscored —
Impero Education Pro before 5105 relies on the -1|AUTHENTICATE\x02PASSWORD string for authentication, which allows remo…
-
Unscored —
Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro s…
-
Unscored —
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles lon…
-
Unscored —
Cisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service (servic…
-
Unscored —
Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote…
-
Medium —
phpMyAdmin ReCaptcha bypass
libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct resp…
-
Unscored —
Cisco Application Visibility and Control (AVC) 15.3(3)JA, when FlexConnect is enabled, allows remote attackers to cause…
-
Unscored —
Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption fr…
-
Unscored —
Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a …
-
Unscored —
IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service (channel-agent abend and pr…
-
Unscored —
The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier f…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows re…
-
Unscored —CVE-2015-6920 Scanner template
Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the googleSearch (CSE) (com_googlesearch_cse) component 3.0.2 for Joomla! a…
-
Unscored —
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a deni…
-
Unscored —
The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenti…
-
Unscored —
Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station bef…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-…
-
Unscored —
The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated user…
-
Unscored —CVE-2015-6911 Public exploit
SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a fu…
-
Unscored —
SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL …
-
Unscored —
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a d…
-
Unscored —
SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute ar…
-
Unscored —
Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in Synology Download Sta…
-
Unscored —
SMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to obtain access via unspeci…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers…
-
Unscored —CVE-2014-9208 Public exploit
Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attacke…
-
Unscored —CVE-2015-6827 Public exploit
Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentic…
-
High —
DataTable Vulnerable to Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.
-
Unscored —
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memor…
-
Unscored —
Adobe Shockwave Player before 12.2.0.162 allows attackers to execute arbitrary code or cause a denial of service (memor…
-
Unscored —
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 improperly processes ACL settings, which allow…
-
Unscored —CVE-2015-2492 EPSS 18%
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-2501 EPSS 24%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…