Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
February

CVEs published in February 2015

482 vulnerabilities, 66 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

fortinet forticlientThe Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5...CVE-2015-15704.3 MediumFebruary 10, 2015
fortinet forticlientFortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for...CVE-2015-15694.3 MediumFebruary 10, 2015
webminThe Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink...CVE-2015-13774.9 MediumFebruary 10, 2015
apereo central authentication serviceApereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to...CVE-2015-11697.5 HighFebruary 10, 2015
mantisbtThe string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses...CVE-2015-10425.8 MediumFebruary 10, 2015
acme mini httpdmini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process...CVE-2015-1548Fix available5.0 MediumFebruary 10, 2015
cloudera managerCloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in...CVE-2014-87332.1 LowFebruary 10, 2015
epignosis efrontMultiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis...CVE-2015-15596.8 MediumFebruary 10, 2015
phpbbThe message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not...CVE-2015-1432Fix available6.8 MediumFebruary 10, 2015
phpbbCross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows...CVE-2015-1431Fix available4.3 MediumFebruary 10, 2015
moodleMoodle directory traversal vulnerabilityCVE-2015-1493Fix available6.8 MediumFebruary 9, 2015
studio.gd gd infinite scrollCross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4...CVE-2015-15686.8 MediumFebruary 9, 2015
studio.gd gd infinite scrollCross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module...CVE-2015-15674.3 MediumFebruary 9, 2015
dnnsoftware dotnetnukeModerate severity vulnerability that affects DotNetNuke.CoreCVE-2015-1566Fix available4.3 MediumFebruary 9, 2015
hitachi compute systems manager, device manager, global link manager +2 more +4 moreCross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered...CVE-2015-15654.3 MediumFebruary 9, 2015
plainblack webguiCross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10...CVE-2015-15644.3 MediumFebruary 9, 2015
xen, fedoraproject fedora +1 moreThe ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a...CVE-2015-1563Fix available2.1 LowFebruary 9, 2015
saurus cmsMultiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to...CVE-2015-15624.3 MediumFebruary 9, 2015
digium asteriskAsterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel...CVE-2015-1558Fix available3.5 LowFebruary 9, 2015
freetype, canonical ubuntu linux, debian linux +8 more +10 morebdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial...CVE-2014-9675Fix available5.0 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with...CVE-2014-9674Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +7 more +9 moreInteger signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType...CVE-2014-9673Fix available6.8 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +2 more +4 moreArray index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows...CVE-2014-9672Fix available5.8 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +8 more +10 moreOff-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4...CVE-2014-9671Fix available4.3 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to...CVE-2014-9669Fix available6.8 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length...CVE-2014-9668Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +8 more +10 moresfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without...CVE-2014-9667Fix available6.8 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows...CVE-2014-9665Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 MediumFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +2 more +4 morecff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation...CVE-2014-9662Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +8 more +10 moretype42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete...CVE-2014-9661Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, fedoraproject fedora +2 more +4 morecff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with...CVE-2014-9659Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 HighFebruary 8, 2015
freetype, canonical ubuntu linux, debian linux +2 more +4 moreThe tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not...CVE-2014-9656Fix available7.5 HighFebruary 8, 2015
microsoft internet explorerCross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows...CVE-2015-0072Public exploitEPSS 71.7%4.3 MediumFebruary 7, 2015
shiromuku guestbookCross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62...CVE-2015-08714.3 MediumFebruary 7, 2015
cisco unified ip phones 9900 series firmwareThe mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows...CVE-2015-06025.0 MediumFebruary 7, 2015
cisco unified ip phones 9900 series firmwareThe mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows...CVE-2015-06005.0 MediumFebruary 7, 2015
cisco webex meetings serverThe administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote...CVE-2015-05899.0 HighFebruary 7, 2015
ge 12400 level transmitter device type manager, svi ii ap positioner device type manager, vector device type manager +1 more +3 moreBuffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager ...CVE-2014-92035.0 MediumFebruary 7, 2015
cisco asyncosThe uuencode inspection engine in Cisco AsyncOS on Cisco Email Security Appliance (ESA) devices 8...CVE-2015-06054.3 MediumFebruary 7, 2015
cisco unified ip phones 9951 firmware, unified ip phones 9971 firmware +1 moreThe web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote...CVE-2015-06045.0 MediumFebruary 7, 2015
cisco unified ip phones 9900 series firmwareCisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for...CVE-2015-06034.6 MediumFebruary 7, 2015
cisco unified ip phones 9951 firmware, unified ip phones 9971 firmware +1 moreCisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a...CVE-2015-06014.6 MediumFebruary 7, 2015
cisco adaptive security appliance softwareThe Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security...CVE-2013-55576.3 MediumFebruary 7, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open