CVEs published in February 2015

482 vulnerabilities, 66 critical, 3 exploited.

• linux Ubuntu linux vulnerability USN-2516-2 Fix available No scoreFebruary 28, 2015
• kent-web joyful note KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and... CVE-2015-0889 7.5 HighFebruary 28, 2015
• kent-web clip board KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified... CVE-2015-0888 6.4 MediumFebruary 28, 2015
• iij seil\/b1, seil\/b1 firmware, seil\/x1 firmware +2 more +4 more npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30,... CVE-2015-0887 7.1 HighFebruary 28, 2015
• mindrot jbcrypt, fedoraproject fedora +1 more Integer Overflow or Wraparound in JBCrypt CVE-2015-0886 Fix available 5.0 MediumFebruary 28, 2015
• checkpw project checkpw, debian linux +1 more checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via... CVE-2015-0885 Fix available 5.0 MediumFebruary 28, 2015
• toshiba bluetooth stack, service station +1 more Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32... CVE-2015-0884 6.9 MediumFebruary 28, 2015
• cisco unified web and e-mail interaction manager Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web... CVE-2015-0655 4.3 MediumFebruary 28, 2015
• dns-sync project dns-sync dns-sync command injection vulnerability CVE-2014-9682 Fix available 10.0 HighFebruary 28, 2015
• ffmpeg The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free... CVE-2014-9676 Fix available 6.8 MediumFebruary 28, 2015
• libgtk2-perl Debian libgtk2-perl - security update DLA-161-1 Fix available No scoreFebruary 28, 2015
• cosmoshop Cross-site scripting (XSS) vulnerability in the admin-login panel (admin/index.cgi) in Cosmoshop... CVE-2015-2103 4.3 MediumFebruary 27, 2015
• clip-bucket clipbucket SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows... CVE-2015-2102 Public exploit 7.5 HighFebruary 27, 2015
• impliedbydesign navigate Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1... CVE-2015-2101 4.3 MediumFebruary 27, 2015
• sap businessobjects edge The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive... CVE-2015-2076 5.0 MediumFebruary 27, 2015
• sap businessobjects edge SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee... CVE-2015-2075 5.0 MediumFebruary 27, 2015
• sap hana Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA... CVE-2015-2072 4.3 MediumFebruary 27, 2015
• network vision intravue Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary... CVE-2015-0977 10.0 HighFebruary 27, 2015
• synck graphica mailform pro cgi SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not... CVE-2015-0883 6.8 MediumFebruary 27, 2015
• zen-cart zen cart Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition)... CVE-2015-0882 4.3 MediumFebruary 27, 2015
• cisco application networking manager Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking... CVE-2015-0651 6.8 MediumFebruary 27, 2015
• cisco ios, ios xe +1 more Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE... CVE-2015-0632 5.7 MediumFebruary 27, 2015
• cisco prime lan management solution, security manager +1 more Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services,... CVE-2015-0594 4.3 MediumFebruary 27, 2015
• sympies wordpress survey and poll SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey... CVE-2015-2090 Public exploit 7.5 HighFebruary 26, 2015
• crossslide jquery project jquery Multiple cross-site request forgery (CSRF) vulnerabilities in the CrossSlide jQuery (crossslide... CVE-2015-2089 6.8 MediumFebruary 26, 2015
• term queue project queue Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Term Queue... CVE-2015-2088 4.3 MediumFebruary 26, 2015
• avatar uploader project uploader Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal... CVE-2015-2087 6.5 MediumFebruary 26, 2015
• panopoly magic project magic Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before... CVE-2015-2086 3.5 LowFebruary 26, 2015
• cabextract project cabextract cabextract before 1.6 does not properly check for leading slashes when extracting files, which... CVE-2015-2060 Fix available 5.3 MediumFebruary 26, 2015
• cisco unified computing system The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and... CVE-2015-0633 6.8 MediumFebruary 26, 2015
• bestpractical request tracker, fedoraproject fedora +1 more RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack... CVE-2015-1464 Fix available 6.4 MediumFebruary 26, 2015
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote... CVE-2015-1165 Fix available 5.0 MediumFebruary 26, 2015
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4... CVE-2014-9472 Fix available 7.1 HighFebruary 26, 2015
• cybernetikz easy social icons Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for... CVE-2015-2084 Public exploit 6.8 MediumFebruary 25, 2015
• ilch cms Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the... CVE-2015-2083 6.8 MediumFebruary 25, 2015
• unit4 prosoft hrms Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43... CVE-2015-2082 4.3 MediumFebruary 25, 2015
• visualware myconnection server Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow... CVE-2015-2043 4.3 MediumFebruary 25, 2015
• vanillaforums vanilla, vanilla forums +1 more Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x... CVE-2014-9685 4.3 MediumFebruary 25, 2015
• mozilla firefox, firefox esr, thunderbird +2 more +4 more Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0,... CVE-2015-0833 Fix available 6.9 MediumFebruary 25, 2015
• mozilla firefox, opensuse, oracle solaris +2 more Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before... CVE-2015-0828 Fix available 6.8 MediumFebruary 25, 2015
• libgtk2-perl Debian libgtk2-perl - security update DSA-3173-1 Fix available No scoreFebruary 25, 2015
• freebsd, debian linux, netgate pfsense +2 more Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before... CVE-2015-1414 Fix available 7.8 HighFebruary 25, 2015
• mozilla firefox Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow... CVE-2015-0835 Fix available 7.5 HighFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +2 more The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but... CVE-2015-0834 Fix available 4.3 MediumFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +2 more Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and... CVE-2015-0832 Fix available 5.0 MediumFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +2 more The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for... CVE-2015-0830 Fix available 5.0 MediumFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 more Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to... CVE-2015-0829 Fix available 6.8 MediumFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +2 more The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote... CVE-2015-0826 Fix available 6.8 MediumFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +2 more Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla... CVE-2015-0825 Fix available 4.3 MediumFebruary 25, 2015
• mozilla firefox, canonical ubuntu linux, opensuse +2 more The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before... CVE-2015-0824 Fix available 5.0 MediumFebruary 25, 2015
• Show olderLoading…