CVEs published in February 2015
482 vulnerabilities, 66 critical, 3 exploited.
- mozilla firefox, opentype sanitiser project sanitiser, canonical ubuntu linux +1 more +3 moreMultiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before...7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or...6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 36.0 does not properly restrict transitions of JavaScript objects from a...2.6 Low
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...4.3 Medium
- komodia redirector sdkThe SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1...5.0 Medium
- komodia redirector sdkThe SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1...5.0 Medium
- speed software explorer, root explorer +1 moreDirectory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android...5.0 Medium
- ibm rational insightIBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain...5.0 Medium
- ibm tivoli storage managerdsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1...2.1 Low
- etouch samepageDirectory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise...4.0 Medium
- etouch samepageSQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote...7.5 High
- woothemes woocommerceCross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress...4.3 Medium
- magmi project magmiMAGMI cross-site scripting (XSS)4.3 Medium
- magmi project magmiMAGMI plugin for Magento Server Directory Traversal5.0 Medium
- dlguardSQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL...7.5 High
- apptha wordpress video gallerySQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus...7.5 High
- dlguardMultiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote...4.3 Medium
- openstack image registry and delivery service \(glance\)OpenStack Glance Denial of service by creating a large number of images4.0 Medium
- dell asset managerMultiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace...7.5 High
- samsung ipolis device managerBuffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device...6.8 Medium
- openstack image registry and delivery service \(glance\)OpenStack Glance Denial of service by creating a large number of images4.0 Medium
- kony enterprise mobile managementKony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote...4.0 Medium
ca-certificatesUbuntuca-certificates updateNo score- zhone technologies gpon 2520 firmwareZhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service...7.8 High
- sierra wireless aircard 760s, aircard 762s, aircard 763s +2 moreCRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra...4.3 Medium
- mcafee agentThe log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections...4.3 Medium
- dlink dir-645 firmwareStack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12...10.0 High
- dlink dir-645, d-link dir-645 router, dlink dir-645 firmware +2 moreThe D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote...8.8 High
- dlink dap-1320 firmwareD-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary...10.0 High
- dlink dcs-931l firmwareUnrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows...9.0 High
- dlink dcs-931l firmwareCross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier...6.8 Medium
- archmage project archmageDirectory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary...5.0 Medium
- puppet facterPuppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata2.1 Low
- google play services sdkThe GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in...4.3 Medium
- debian linux, linux kernel +1 moreRace condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1...1.9 Low
- linux kernel, oracle linux +1 moreThe ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local...4.9 Medium
- phpMultiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before...7.5 High
- gnu glibcThe getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is...5.1 Medium
- ibm tivoli storage managerStack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4...7.2 High
- cisco ips sensor softwareRace condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices...7.1 High
- cisco content security management appliance, web security appliance, email security appliance firmware +2 moreThe web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management...4.3 Medium
- cisco carrier routing system, ios xr +1 moreCisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4...7.1 High
- adobe flash playerUse-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before...10.0 High
- typo3, debian linux +1 moreThe rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39,...2.6 Low
- freedesktop xdg-utils, debian linux +1 moreThe open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash,...8.8 High
- cfdbplugin contact form dbCross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to...4.3 Medium
- acobot live chat \& contact form project live chat \& contact formMultiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live Chat & Contact Form...6.8 Medium
- piwigoSQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote...6.5 Medium
- piwigoCross-site scripting (XSS) vulnerability in the administrative backend in Piwigo before 2.7.4...4.3 Medium
- piwigoSQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote...6.0 Medium
- Show moreLoading…