Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
February

CVEs published in February 2015

482 vulnerabilities, 66 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

redhat ovirt-engineCross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote...CVE-2014-01516.8 MediumFebruary 13, 2015
jython project jython, opensuse +1 moreJython Improper Access Restrictions vulnerabilityCVE-2013-2027Fix available4.6 MediumFebruary 13, 2015
homepage decorator perltreebbsCross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier...CVE-2015-08734.3 MediumFebruary 13, 2015
cisco iosThe Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly...CVE-2015-05937.1 HighFebruary 13, 2015
ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6...CVE-2014-89093.5 LowFebruary 13, 2015
advantech eki-1200 gateway series firmwareBuffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers...CVE-2014-838510.0 HighFebruary 13, 2015
ibm tivoli storage managerdsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2,...CVE-2014-61857.2 HighFebruary 13, 2015
ibm optim performance managerDirectory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1...CVE-2014-61547.8 HighFebruary 13, 2015
ibm business process managerThe Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote...CVE-2014-61394.0 MediumFebruary 13, 2015
ibm tivoli storage managerRace condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0...CVE-2014-48136.9 MediumFebruary 13, 2015
ibm curam social program managementCRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program...CVE-2014-48033.5 LowFebruary 13, 2015
ibm infosphere biginsightsThe alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x before 3.0.0.2 allows remote...CVE-2014-47815.0 MediumFebruary 13, 2015
ibm websphere mqIBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0...CVE-2014-47713.5 LowFebruary 13, 2015
openldap, apple mac os x, opensuse +2 moreDouble free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4...CVE-2015-1546Fix available5.0 MediumFebruary 12, 2015
pragyan cms project cmsSQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to...CVE-2015-1471Public exploit7.5 HighFebruary 12, 2015
gnu grep, opensuse +1 moreThe bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...CVE-2015-1345Fix available2.1 LowFebruary 12, 2015
apache wss4jImproper Access Control in Apache WSS4JCVE-2015-0227Fix available5.0 MediumFebruary 12, 2015
apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQCVE-2014-8110Public exploitFix available4.3 MediumFebruary 12, 2015
cisco adaptive security appliance softwareMemory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security...CVE-2015-06195.0 MediumFebruary 12, 2015
cisco telepresence system software ixThe administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence...CVE-2015-06116.5 MediumFebruary 12, 2015
cisco iosRace condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote...CVE-2015-06104.3 MediumFebruary 12, 2015
cisco iosRace condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in...CVE-2015-06087.1 HighFebruary 12, 2015
cisco iosThe IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via...CVE-2015-06064.9 MediumFebruary 12, 2015
cisco iosThe Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers...CVE-2015-05927.8 HighFebruary 12, 2015
cisco secure access control systemMultiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure...CVE-2015-05806.5 MediumFebruary 12, 2015
cisco prime security managerMultiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1...CVE-2014-33654.3 MediumFebruary 12, 2015
cisco prime infrastructureMultiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure...CVE-2014-21534.3 MediumFebruary 12, 2015
cisco prime infrastructureCross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure ...CVE-2014-21526.8 MediumFebruary 12, 2015
cisco prime infrastructureThe web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of...CVE-2014-21474.3 MediumFebruary 12, 2015
openldapThe deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40...CVE-2015-1545Fix availableEPSS 11.1%5.0 MediumFebruary 12, 2015
samba rsync, opensuse, oracle solaris +2 morersync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...CVE-2014-9512Fix available6.4 MediumFebruary 12, 2015
perl-Gtk2 MageiaUpdated perl-Gtk2 packages fix a security vulnerabilityMGASA-2015-0059Fix availableNo scoreFebruary 11, 2015
e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12...CVE-2015-0247Fix available4.6 MediumFebruary 11, 2015
web-dorado spider facebookMultiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11...CVE-2015-15824.3 MediumFebruary 11, 2015
mobile domain project domainMultiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for...CVE-2015-15816.8 MediumFebruary 11, 2015
redirection project redirectionMultiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for...CVE-2015-15806.8 MediumFebruary 11, 2015
elegantthemes diviDirectory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote...CVE-2015-1579Public exploitEPSS 20.9%5.0 MediumFebruary 11, 2015
yuba u5cmsMultiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect...CVE-2015-1578Public exploit5.8 MediumFebruary 11, 2015
yuba u5cmsDirectory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote...CVE-2015-1577Public exploit6.4 MediumFebruary 11, 2015
yuba u5cmsMultiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute...CVE-2015-1576Public exploit7.5 HighFebruary 11, 2015
yuba u5cmsMultiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers...CVE-2015-1575Public exploit4.3 MediumFebruary 11, 2015
redaxscriptSQL injection vulnerability in the search_post function in includes/search.php in Redaxscript...CVE-2015-1518Public exploit7.5 HighFebruary 11, 2015
holding pattern project patternUnrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka...CVE-2015-1172Public exploitEPSS 58.3%7.5 HighFebruary 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection...CVE-2015-0071In KEVEPSS 33.6%6.5 MediumFebruary 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to read content from a different...CVE-2015-0070EPSS 16.2%4.3 MediumFebruary 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection...CVE-2015-0069EPSS 15.5%4.3 MediumFebruary 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2015-0068EPSS 25.0%9.3 HighFebruary 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or...CVE-2015-0067EPSS 15.5%9.3 HighFebruary 11, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-0066EPSS 15.5%9.3 HighFebruary 11, 2015
microsoft wordMicrosoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of...CVE-2015-0065Public exploitEPSS 30.3%9.3 HighFebruary 11, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open