Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
February

CVEs published in February 2015

482 vulnerabilities, 66 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

cmsjunkie j-classifiedsmanagerSQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows...CVE-2015-1477Public exploit7.5 HighFebruary 4, 2015
ecommercemajor project ecommercemajorMultiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to...CVE-2015-1476Public exploit7.5 HighFebruary 4, 2015
mylittleforum my little forumMultiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow...CVE-2015-14754.3 MediumFebruary 4, 2015
asus rt-n10\+d1 firmwareMultiple cross-site scripting (XSS) vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1...CVE-2015-14374.3 MediumFebruary 4, 2015
zohocorp manageengine desktop centralCross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9...CVE-2014-9331Public exploit6.8 MediumFebruary 4, 2015
zohocorp manageengine opmanagerMultiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in...CVE-2014-7864Public exploitEPSS 22.7%7.5 HighFebruary 4, 2015
servision hvg video gateway firmwaretime.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2...CVE-2015-14699.0 HighFebruary 3, 2015
servision hvg video gateway firmwareThe web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a...CVE-2015-093010.0 HighFebruary 3, 2015
servision hvg video gateway firmwaretime.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2...CVE-2015-092910.0 HighFebruary 3, 2015
cisco unified computing systemThe web interface in Cisco Integrated Management Controller in Cisco Unified Computing System ...CVE-2015-05994.3 MediumFebruary 3, 2015
cisco anyconnect secure mobility client, hostscan engine +1 moreCross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043)...CVE-2014-80214.3 MediumFebruary 3, 2015
cisco nx-osThe TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a...CVE-2014-80134.9 MediumFebruary 3, 2015
huawei quidway firmwareHuawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain...CVE-2015-14607.5 HighFebruary 3, 2015
fortinet fortiauthenticatorCross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote...CVE-2015-14594.3 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain...CVE-2015-14586.9 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to...CVE-2015-14574.9 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which...CVE-2015-14564.0 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and ...CVE-2015-14557.5 HighFebruary 3, 2015
piwigoSQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3...CVE-2015-14417.5 HighFebruary 3, 2015
fedoraproject fedora, roundcube webmail +1 moreprogram/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings...CVE-2015-1433Fix available4.3 MediumFebruary 3, 2015
sefrengoMultiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to...CVE-2015-1428Public exploit7.5 HighFebruary 3, 2015
content rating extbase project rating extbaseSQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3...CVE-2015-14057.5 HighFebruary 3, 2015
content rating extbase project rating extbaseCross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and...CVE-2015-14044.3 MediumFebruary 3, 2015
content rating project ratingSQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows...CVE-2015-14037.5 HighFebruary 3, 2015
content rating project ratingCross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for...CVE-2015-14024.3 MediumFebruary 3, 2015
npds revolutionSQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to...CVE-2015-1400Public exploit7.5 HighFebruary 3, 2015
banner effect header project effect headerCross-site scripting (XSS) vulnerability in the Banner Effect Header plugin before 1.2.8 for...CVE-2015-13844.3 MediumFebruary 3, 2015
privoxy, opensuse, oracle solaris +2 morejcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a...CVE-2015-1380Fix available5.0 MediumFebruary 3, 2015
arubanetworks instant access point firmwareHeap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4...CVE-2015-13487.8 HighFebruary 3, 2015
comodo backupThe bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges...CVE-2014-9633Public exploit7.5 HighFebruary 3, 2015
fluxbbDirectory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers...CVE-2014-95749.3 HighFebruary 3, 2015
voxpupuli rabbitmqpuppetlabs-rabbitmq allows local users to obtain sensitive informationCVE-2014-9568Fix available2.1 LowFebruary 3, 2015
snipsnapCross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote...CVE-2014-95594.3 MediumFebruary 3, 2015
pexip infinityPexip Infinity before 8 uses the same SSH host keys across different customers' installations,...CVE-2014-87797.1 HighFebruary 3, 2015
landesk management suiteCross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite...CVE-2014-53604.3 MediumFebruary 3, 2015
bluecoat proxyclient, unified agent +1 moreBlue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3...CVE-2015-14547.1 HighFebruary 2, 2015
fortinet forticlientThe qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of...CVE-2015-14535.0 MediumFebruary 2, 2015
fortinet fortiosThe Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0...CVE-2015-14527.8 HighFebruary 2, 2015
fortinet fortiosMultiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457...CVE-2015-14513.5 LowFebruary 2, 2015
apache qpidUnspecified vulnerability in Apache Qpid 0.30 and earlier allows remote attackers to bypass...CVE-2015-02235.0 MediumFebruary 2, 2015
freebsdThe sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23...CVE-2014-86137.8 HighFebruary 2, 2015
freebsdMultiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD...CVE-2014-8612Public exploit4.6 MediumFebruary 2, 2015
freebsdInteger signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10...CVE-2014-0998Public exploit7.2 HighFebruary 2, 2015
restaurantbiller restaurant billerSQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL...CVE-2015-14507.5 HighFebruary 2, 2015
siemens ruggedcom firmwareBuffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with firmware...CVE-2015-144910.0 HighFebruary 2, 2015
siemens ruggedcom firmwareThe integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4...CVE-2015-144810.0 HighFebruary 2, 2015
10web photo gallerySQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote...CVE-2015-13936.5 MediumFebruary 2, 2015
blubrry powerpressCross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1...CVE-2015-13854.3 MediumFebruary 2, 2015
cyberhobo geo mashupCross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before...CVE-2015-13834.3 MediumFebruary 2, 2015
siemens ruggedcom firmwareSiemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with...CVE-2015-13575.0 MediumFebruary 2, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open