CVEs published in January 2015
682 vulnerabilities, 42 critical, 2 exploited.
- vmware esxi, player, workstation +2 morevmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware...3.3 Low
- vmware fusion, player, workstation +2 moreThe Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x...3.3 Low
- vmware esxi, fusion, player +1 more +3 moreVMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6...6.4 Medium
- jakweb gecko cmsCross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers...6.8 Medium
- jakweb gecko cmsMultiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to...6.5 Medium
- jakweb gecko cmsMultiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote...4.3 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows...4.3 Medium
- ibm tririga application platformOpen redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3,...4.9 Medium
- ibm tririga application platformMultiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet...3.5 Low
- privoxy, debian linux, opensuse +2 moreparsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid...5.0 Medium
- privoxy, debian linux, opensuse +2 moreMultiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to...5.0 Medium
- redhat libvirt, canonical ubuntu linux, mageia +4 more +6 morelibvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the...3.5 Low
- cisco iosThe Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M...7.8 High
- cisco prime service catalogThe XML parser in Cisco Prime Service Catalog before 10.1 allows remote authenticated users to...7.5 High
- ibm i accessBuffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1, and 7.1 on...7.2 High
- ibm social media analytics, financial transaction manager, financial transaction manager for check services +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka...4.3 Medium
- vsftpd project vsftpd, opensuse +1 moreUnspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access...5.0 Medium
- pixabay images project imagespixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate...4.0 Medium
- pixabay images project imagespixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly...7.5 High
- gnu patch, debian linux +1 moreA Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can...7.5 High
- gnu patch, canonical ubuntu linux, fedoraproject fedora +2 moreDirectory traversal vulnerability in GNU patch versions which support Git-style patching before 2...7.5 High
privoxyMageiaUpdated privoxy packages fix security vulnerabilitiesNo score- adobe flash player, flash player desktop runtime +1 moreDouble free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16...9.3 High
- busyboxThe add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to...5.5 Medium
- ferretcms project ferretcmsMultiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha...6.8 Medium
- ferretcms project ferretcmsMultiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow...4.3 Medium
- ferretcms project ferretcmsSQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary...7.5 High
- ferretcms project ferretcmsUnrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to...7.5 High
- marked project markedVBScript Content Injection in marked4.3 Medium
- sequelize project sequelizeSQL Injection in sequelize7.5 High
- ansible towerMultiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0...4.3 Medium
- catbot project catbotSQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute...7.5 High
- pixabay images project imagesCross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin...4.3 Medium
- pixabay images project imagesDirectory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4...5.0 Medium
- freereprintables articlefrSQL injection vulnerability in the getProfile function in system/profile.functions.php in Free...7.5 High
- freereprintables articlefrCross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote...4.3 Medium
- two pilots exif pilotBuffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers...7.5 High
- broadcom rabbitmq serverCRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4...5.0 Medium
- broadcom rabbitmq serverCross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x...4.3 Medium
- gnome vala, opensuse +1 moreThe Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration...7.5 High
- attachmate reflection ftp clientStack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote...6.8 Medium
firefoxUbuntufirefox regressionNo score- google chromeplatform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does...6.8 Medium
- google chromeSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...7.5 High
- google chromeMultiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome...6.8 Medium
- google chromecomponents/navigation_interception/intercept_navigation_resource_throttle.cc in Google Chrome...4.3 Medium
- google chromeUse-after-free vulnerability in PDFium, as used in Google Chrome before 40.0.2214.91, allows...6.8 Medium
- google chromeUnquoted Windows search path vulnerability in the GoogleChromeDistribution:...4.6 Medium
- schneider electric etg3000 factorycast hmi gateway, schneider-electric etg3000 factorycast hmi gateway firmware, tsxetg3000 +3 more +5 moreSchneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials10.0
- schneider electric etg3000 factorycast hmi gateway, schneider-electric etg3000 factorycast hmi gateway firmware, tsxetg3000 +3 more +5 moreSchneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function10.0
- Show moreLoading…