CVEs published in February 2015
482 vulnerabilities, 66 critical, 3 exploited.
- webform prepopulate block project prepopulate blockCross-site scripting (XSS) vulnerability in the Webform prepopulate block module before 7.x-3.1...3.5 Low
- mcafee email gatewayCross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee...3.5 Low
- mcafee data loss prevention endpointThe ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote...4.0 Medium
- mcafee data loss prevention endpointCross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention...3.5 Low
- mcafee data loss prevention endpointSQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe)...6.5 Medium
- colorlib fancyboxThe FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access,...4.3 Medium
- elastic elasticsearch, redhat fuse +1 moreImproper Access Control in Elasticsearch9.8 Critical
- open-xchange appsuiteOpen-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1...4.0 Medium
- lg on-screen phoneLG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to bypass authorization via a...8.3 High
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response...4.0 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +9 more +11 moreDirectory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1...4.0 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +9 more +11 moreIBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset...2.1 Low
- rhodecode enterpriseRhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive...4.0 Medium
- solarwinds server and application monitorThe factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and...6.8 Medium
- solarwinds server and application monitorMultiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and...6.8 Medium
- samsung security managerThe ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to...8.5 High
- persistent systems radia client automationPersistent Systems Radia Client Automation does not properly restrict access to certain request,...10.0 High
- persistent systems radia client automationradexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows...10.0 High
- motorola scanner sdkMotorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice...7.2 High
- motorola scanner sdkMultiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute...6.8 Medium
- easing slider project sliderCross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress...4.3 Medium
- mylittleforum my little forumCross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers...4.3 Medium
- mylittleforum my little forumMultiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote...6.5 Medium
- xenThe vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with...4.9 Medium
- kallithea-scm kallithea, rhodecode enterprise +1 moreRhodeCode and Kallithea are vulnerable to sensitive information disclosure4.0 Medium
- lexmark markvision enterpriseDirectory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision...9.0 High
- topline systems opportunity formTopline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access...4.0 Medium
- gnupg, canonical ubuntu linux +1 morekbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not...5.5 Medium
- gnupg, debian linux +1 moreThe keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows...5.5 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12...4.6 Medium
- google androidMultiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native...10.0 High
- cisco iosRace condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and...7.1 High
- ibm tivoli endpoint managerCross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint...4.3 Medium
- ibm tivoli endpoint managerCross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint...4.3 Medium
- google emailThe Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of...5.0 Medium
- hp universal configuration management databaseHP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which...5.0 Medium
- okb.co.jp smartphone passbookThe Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file...1.8 Low
- emc captiva captureThe InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25...2.1 Low
- emc documentum d2The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4...9.0 High
- emc documentum d2The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2...4.0 Medium
- ektron content management systemEktron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the...6.8 Medium
- ektron content management systemThe ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System ...5.0 Medium
- ibm content navigatorCross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2...4.3 Medium
- ibm tivoli storage managerThe (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup...1.9 Low
- ibm curam social program managementCuram Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before...4.3 Medium
- redhat jboss weldInformation disclosure in JBoss Weld4.3 Medium
- redhat jboss enterprise application platform, jboss operations network +1 moreThe JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application...4.0 Medium
- redhat jboss enterprise application platformThe Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP...4.0 Medium
- redhat jboss enterprise application platformThe org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in...3.5 Low
- ovirtoVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the...5.0 Medium
- Show moreLoading…