CVEs published in February 2015
482 vulnerabilities, 66 critical, 3 exploited.
- textangularCross-site scripting (XSS) vulnerability in textAngular-sanitize.js in textAngular before 1.3.7...4.3 Medium
- redhat kie workbenchThe default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to...6.5 Medium
- redhat uberfireUberFire Framework Improperly Restricts Paths6.8 Medium
- redhat jbpm-designerXML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2...7.5 High
- redhat jboss enterprise application platform, jboss enterprise brms platform +1 morePicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and...3.6 Low
- infoblox netmriAnyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers...10.0 High
- squid-cache squidCRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary...4.3 Medium
- crear.ne.jp al-mail32Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code...6.8 Medium
- almail al-mail32CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application...4.3 Medium
- almail al-mail32Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to...5.8 Medium
- cisco web security applianceThe proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass...5.0 Medium
- cisco desktop collaboration experience dx650The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration...7.2 High
- mit kerberos 5MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field...5.0 Medium
- pivotal software spring frameworkImproper Limitation of a Pathname to a Restricted Directory in Spring Framework5.0 Medium
nssUbuntunss updateNo score- google doc embedder doc embedderCross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for...4.3 Medium
- image metadata cruncher project metadata cruncherMultiple cross-site request forgery (CSRF) vulnerabilities in the Image Metadata Cruncher plugin...6.8 Medium
- adminsystems cms project cmsUnrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2...6.5 Medium
- adminsystems cms project cmsMultiple cross-site scripting (XSS) vulnerabilities in Adminsystems CMS before 4.0.2 allow remote...4.3 Medium
- sixapart movable type, debian linux +1 moreMovable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7...7.5 High
- maarch letterbox, gec\/ged +1 moreUnrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier...7.5 High
- fatfreecrm fat free crmFat Free CRM Cross-Site Request Forgery vulnerability6.8 Medium
- softsphere defensewall personal firewallThe dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write...7.2 High
- instantasp instantforumMultiple cross-site scripting (XSS) vulnerabilities in InstantASP InstantForum.NET 4.1.3, 4.1.2,...4.3 Medium
- exponentcms exponent cmsMultiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x...4.3 Medium
- powerpc-utils project powerpc-utilsscripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module...10.0 High
- phusion passengerInsecure use of temporary files in Phusion passenger2.1 Low
- phusion passengerInsecure use of temporary files in passenger2.1 Low
- fastcgi fcgiFastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service ...5.0 Medium
cpioMageiaUpdated cpio package fixes security vulnerabilityNo score- pnmsoft sequence kineticsThe Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to...5.0 Medium
- pnmsoft sequence kineticsThe Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly...5.0 Medium
- pnmsoft sequence kineticsThe Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote...5.0 Medium
- pnmsoft sequence kineticsMultiple cross-site scripting (XSS) vulnerabilities in the tables-management module in PNMsoft...4.3 Medium
- ibm flex system managerIBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows...2.1 Low
- tibco activematrix management agent, activematrix policy agent, activematrix policy manager +2 moreThe ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x...6.4 Medium
- gnu cpiocpio 2.11, when using the --no-absolute-filenames option, allows local users to write to...1.9 Low
- cisco hosted collaboration solutionThe SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain...4.3 Medium
- cisco web security applianceCross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security...4.3 Medium
- cisco wireless lan controllerThe Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC)...7.1 High
- siemens winccThe remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Advanced...5.0 Medium
- siemens simatic step 7Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines a user's privileges on the basis of...4.4 Medium
- siemens simatic step 7Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which...2.1 Low
- cisco telepresence mcu 4500 series softwareCisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial...7.8 High
- cisco telepresence management suiteThe XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not...4.0 Medium
- cisco asr 5000 series softwareCisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to...5.0 Medium
- ibm maximo asset management, change and configuration management database, maximo asset management essentials +8 more +10 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and...3.5 Low
- ibm maximo asset management, change and configuration management database, maximo asset management essentials +8 more +10 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and...4.3 Medium
- postgresql, debian linux +1 moreStack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19,...8.8 High
- info-zip unzip, canonical ubuntu linux +1 moreBuffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows...7.5 High
- Show moreLoading…