CVEs published in January 2015
682 vulnerabilities, 42 critical, 2 exploited.
- cambio project cambioCross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37...6.8 Medium
- whcms project whcmsCross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows...6.8 Medium
- redaxscripttemplates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive...5.0 Medium
- redaxscriptMultiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote...7.5 High
- gollosMultiple cross-site scripting (XSS) vulnerabilities in Gollos 2.8 allow remote attackers to...4.3 Medium
- cherry-design wikipadCross-site request forgery (CSRF) vulnerability in pages.php in Wikipad 1.6.0 allows remote...6.8 Medium
- cherry-design wikipadDirectory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read...5.0 Medium
- cherry-design wikipadCross-site scripting (XSS) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to...4.3 Medium
- cdnvote project cdnvoteMultiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for...7.5 High
- photosmash project photosmashCross-site scripting (XSS) vulnerability in index.php in the PhotoSmash plugin 1.0.1 for...4.3 Medium
- zaunz gmbh cosmoshopCross-site request forgery (CSRF) vulnerability in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO...6.8 Medium
- zaunz gmbh cosmoshopMultiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote...4.3 Medium
- sodahead pollsMultiple cross-site scripting (XSS) vulnerabilities in the Sodahead Polls plugin before 2.0.4 for...4.3 Medium
- clausmuus spitfireCross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to...4.3 Medium
- kubelabs phpdugCross-site request forgery (CSRF) vulnerability in adm/admin_edit.php in PHPDug 2.0.0 allows...6.8 Medium
- kubelabs phpdugMultiple cross-site scripting (XSS) vulnerabilities in PHPDug 2.0.0 allow remote attackers to...4.3 Medium
- pommo pommo-ardvarkCross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark...6.8 Medium
- pommo pommo-ardvarkMultiple cross-site scripting (XSS) vulnerabilities in poMMo Aardvark PR16.1 allow remote...4.3 Medium
- viralheat argyle socialMultiple cross-site request forgery (CSRF) vulnerabilities in Argyle Social 2011-04-26 allow...6.8 Medium
- ttfreeware tigertoms chat roomMultiple cross-site scripting (XSS) vulnerabilities in TTChat 1.0.4 allow remote attackers to...4.3 Medium
- tuttophp happy chatCross-site scripting (XSS) vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers...4.3 Medium
- gogago youtube video converterBuffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago...9.3 High
- kofax e-transactions sender sendboxThe SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in...6.4 Medium
- threediffy threedify designerThe cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in...9.3 High
- easewe software ftp ocx activex controlThe EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not...7.5 High
- ashampoo gmbh \& co. 3d cad professional 3The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D...6.4 Medium
- idrive inc online backupThe SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100_EDA1811C.ocx...6.4 Medium
- diego uscanga atube catcherThe SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2...6.4 Medium
- threedify designerMultiple buffer overflows in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll...9.3 High
- heskMultiple cross-site scripting (XSS) vulnerabilities in HESK before 2.4.1 allow remote attackers...4.3 Medium
- social slider project sliderSQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2...7.5 High
- bugfreeMultiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to...4.3 Medium