CVEs published in January 2015
682 vulnerabilities, 42 critical, 2 exploited.
- illumosThe devzvol_readdir function in illumos does not check the return value of a strchr call, which...5.0 Medium
- getsentry raven-rubysentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number5.0 Medium
- cagintranetworks getsimple cmsXML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x...5.0 Medium
- debian dpkgMultiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg...6.8 Medium
- advantech adamviewMultiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote...7.5 High
- moodleMoodle cross-site request forgery (CSRF) vulnerability6.8 Medium
- moodleMoodle allows attackers to cause a denial of service6.8 Medium
- moodleMoodle allows attackers to obtain sensitive calendar-event information4.0 Medium
- moodleMoodle allows attackers to bypass a messaging-disabled setting4.0 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilities6.8 Medium
- moodleMoodle cross-site scripting (XSS) vulnerability3.5 Low
- moodleMoodle allows attackers to obtain sensitive information4.0 Medium
- sympaThe newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6...5.0 Medium
- privoxyMultiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have...7.5 High
- libtiffInteger overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a...5.0 Medium
- file project fileThe ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via...5.0 Medium
tomcat6Debiantomcat6 - regression updateNo score- libpng, apple mac os x, oracle solaris +2 moreBuffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6...7.5 High
- pivotal software rabbitmq managementMultiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ...3.5 Low
- kde applicationskwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC...5.0 Medium
- gentoo xdg-utilsEval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is...6.8 Medium
- ceragon fiberair ip-10c, fiberair ip-10e, fiberair ip-10g +2 moreCeragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier...7.8 High
- cisco webex meeting centerCisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and...5.0 Medium
- ibm security network protection xgs firmwareIBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1...4.3 Medium
- ibm serverguide, toolscenter suite, updatexpress system packs installer +2 moreIBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and...2.1 Low
- ibm tivoli netcool\/omnibusCross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0...3.5 Low
- ibm sas connectivity module firmware, sas raid module firmware +1 moreIBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3...5.0 Medium
- ibm sas connectivity module firmware, sas raid module firmware +1 moreIBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3...7.8 High
- clorius controls a\/s java web client, clorius controls a/s java web client +1 moreClorius Controls A/S ISC SCADA Insecure Java Client Inadequate Encryption Strength10.0
- phoenix contact multiprog, proconos, phoenixcontact-software proconos eclr +2 morePhoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function10.0
- arbiter 1094b gps substation clock, arbiter systems model 1094b gps substation clock +1 moreArbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity5.4
- ge multilink ml800, multilink ml810, ml810/3000/3100 series switch +13 more +15 moreGE Multilink Use of Hard-coded Cryptographic Key10.0
- ge multilink ml800, multilink ml810, ml810/3000/3100 series switch +13 more +15 moreGE Multilink Uncontrolled Resource Consumption5.0
- ge intelligent platforms proficy hmi\/scada cimplicity, proficy hmi/scada–cimplicity +1 moreGE Proficy HMI/SCADA CIMPLICITY CimView6.6
- ffmpegThe vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the...7.5 High
- ffmpeglibavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions...7.5 High
- puppet stdlibThe puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8...6.5 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the Hovercards extension for MediaWiki allows remote...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the preview in the TemplateSandbox extension for...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the preview in the ExpandTemplates extension for...2.6 Low
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in the Listings extension for MediaWiki allow...4.3 Medium
- mediawikiMediaWiki 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote...5.0 Medium
- redhat cloudforms 3.1 management engineSQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote...6.5 Medium
- juniper junosJuniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46...7.8 High
- juniper junosJuniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12...6.1 Medium
- juniper junosJuniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15,...6.9 Medium
- juniper junosThe stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE...5.0 Medium
- juniper junosThe Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4,...7.1 High
- redhat cloudforms 3.1 management engineThe customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default...10.0 High
- insanevisions adaptcmsOpen redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote...5.8 Medium
- Show moreLoading…