Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
January

CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

insanevisions adaptcmsUnrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote...CVE-2015-1059Public exploit6.5 MediumJanuary 16, 2015
insanevisions adaptcmsMultiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to...CVE-2015-1058Public exploit4.3 MediumJanuary 16, 2015
e107Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote...CVE-2015-1057Public exploit4.3 MediumJanuary 16, 2015
brother mfc-j4410dw, mfc-j4410dw firmware +1 moreCross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L...CVE-2015-10564.3 MediumJanuary 16, 2015
10web photo gallerySQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote...CVE-2015-10557.5 HighJanuary 16, 2015
crea8socialCross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote...CVE-2015-1054Public exploit3.5 LowJanuary 16, 2015
croogoCross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1...CVE-2015-10534.3 MediumJanuary 16, 2015
macroplant iexplorerUntrusted search path vulnerability in Macroplant iExplorer 3.6.3.0 allows local users to execute...CVE-2014-96007.2 HighJanuary 16, 2015
b2evolutionCross-site scripting (XSS) vulnerability in the filemanager in b2evolution before 5.2.1 allows...CVE-2014-95994.3 MediumJanuary 16, 2015
ia32-libs Debian, ia32-libs-gtk Debian +1 moreia32-libs - security updateDLA-135-1Fix availableNo scoreJanuary 16, 2015
ffmpeg, canonical ubuntu linux +1 morelibavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height,...CVE-2014-9604Fix available7.5 HighJanuary 16, 2015
python pillow, fedoraproject fedora, opensuse +1 more +3 morePillow denial of service via PNG bombCVE-2014-9601Fix available5.0 MediumJanuary 16, 2015
sambaSamba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory...CVE-2014-8143Fix available8.5 HighJanuary 16, 2015
panasonic arbitrator back-end server mk 2.0 vpu, arbitrator back-end server mk 2.0 vpu firmware, arbitrator back-end server mk 3.0 vpu +1 more +3 morePanasonic Arbitrator Back-End Server (BES) MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi...CVE-2014-95964.3 MediumJanuary 15, 2015
cisco unified communications domain managerCisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial...CVE-2015-05915.0 MediumJanuary 15, 2015
cisco unified communications domain managerCross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager ...CVE-2015-05886.8 MediumJanuary 15, 2015
ibm aix, vios +1 morelquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain...CVE-2014-8904Public exploit7.2 HighJanuary 15, 2015
cisco webex meetings serverCisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which...CVE-2014-80345.0 MediumJanuary 15, 2015
cisco identity services engine softwareMultiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow...CVE-2014-80224.3 MediumJanuary 15, 2015
hp insight control server deploymentCross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote...CVE-2014-78814.3 MediumJanuary 15, 2015
phpkitCross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014)...CVE-2015-10524.3 MediumJanuary 15, 2015
context project context, fedoraproject fedora +1 moreOpen redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6...CVE-2015-10515.8 MediumJanuary 15, 2015
f5 big-ip application security managerCross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before...CVE-2015-10504.3 MediumJanuary 15, 2015
e107Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows...CVE-2015-10414.3 MediumJanuary 15, 2015
beditaMultiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0...CVE-2015-10403.5 LowJanuary 15, 2015
zfcuser project zfcuserZF-Commons ZfcUser Vulnerable to XSS in Login RedirectCVE-2015-1039Fix available4.3 MediumJanuary 15, 2015
sap kernelBuffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows...CVE-2014-95956.5 MediumJanuary 15, 2015
sap kernelBuffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows...CVE-2014-95946.5 MediumJanuary 15, 2015
apache cloudstackApache CloudStack before 4.3.2 and 4.4.x before 4.4.2 allows remote attackers to obtain private...CVE-2014-95935.0 MediumJanuary 15, 2015
roundcube webmailMultiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4...CVE-2014-9587Fix available6.8 MediumJanuary 15, 2015
mywebsiteadvisor simple securityMultiple cross-site scripting (XSS) vulnerabilities in the MyWebsiteAdvisor Simple Security...CVE-2014-95704.3 MediumJanuary 15, 2015
softbbCross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows...CVE-2014-95614.3 MediumJanuary 15, 2015
softbbSQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers...CVE-2014-95607.5 HighJanuary 15, 2015
wpeasycart wp easycartUnrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in...CVE-2014-9308Public exploitEPSS 50.6%6.5 MediumJanuary 15, 2015
tapatalkOpen redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4...CVE-2014-88705.8 MediumJanuary 15, 2015
tapatalkMultiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the...CVE-2014-88694.3 MediumJanuary 15, 2015
corel fastflickMultiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute...CVE-2014-83984.6 MediumJanuary 15, 2015
corel fastflick, videostudio pro +1 moreUntrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users...CVE-2014-83974.6 MediumJanuary 15, 2015
corel pdf fusionUntrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary...CVE-2014-83964.6 MediumJanuary 15, 2015
corel painterUntrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary...CVE-2014-83954.6 MediumJanuary 15, 2015
corel corelcadMultiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute...CVE-2014-83944.6 MediumJanuary 15, 2015
openstack neutron, litech router advertisement daemon +1 moreThe L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote...CVE-2014-81534.0 MediumJanuary 15, 2015
pods foundation podsMultiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for...CVE-2014-79576.8 MediumJanuary 15, 2015
podsfoundation podsCross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows...CVE-2014-79564.3 MediumJanuary 15, 2015
odata4j project odata4j, redhat jboss data virtualization +1 moreXML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat...CVE-2014-01715.0 MediumJanuary 15, 2015
gtk+3.0 Ubuntugtk+3.0 updateUSN-2475-1Fix availableNo scoreJanuary 15, 2015
ubufox Ubuntuubufox updateUSN-2458-2Fix availableNo scoreJanuary 14, 2015
cisco webex meeting centerCisco WebEx Meeting Center does not properly restrict the content of URLs, which allows remote...CVE-2015-05835.0 MediumJanuary 14, 2015
cisco telepresence video communication serverCisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers...CVE-2015-05795.0 MediumJanuary 14, 2015
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows...CVE-2015-05785.7 MediumJanuary 14, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open