CVEs published in April 2015
509 vulnerabilities, 40 critical, 6 exploited.
- quassel-irc quassel, debian linux +1 more Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL... 7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +2 more +4 more The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option... 5.0 Medium
- google chrome, canonical ubuntu linux, debian linux +4 more +6 more Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to... 7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 more Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom... 7.5 High
- hospira lifecare pca3, lifecare pca5, lifecare pcainfusion firmware +2 more The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require... 10.0 High
- magento The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition ... 6.5 Medium
- magento Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote... 5.0 Medium
- magento PHP remote file inclusion vulnerability in the fetchView function in the... 6.5 Medium
- magento Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and... 6.5 Medium
- magento SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid... 6.5 Medium
- rest-client project rest-client rest-client allows local users to obtain sensitive information by reading the log 2.1 Low
- sonicwall sonicos Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall... 4.3 Medium
- cisco staros The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on... 5.0 Medium
- cisco ios xe The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote... 6.1 Medium
- cisco ios, ios xe +1 more Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device... 6.8 Medium
- cisco ios, ios xe +1 more Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a... 6.1 Medium
- elasticsearch Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch 4.3 Medium
- xiph icecast, debian linux, opensuse +2 more Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote... 5.0 Medium
- digia qt, fedoraproject fedora +1 more Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7... 6.8 Medium
- digia qt, fedoraproject fedora +1 more Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt... 6.8 Medium
- digia qt, fedoraproject fedora +1 more Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7... 6.8 Medium
- apple os x server Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended... 5.0 Medium
- apple os x server The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in... 5.0 Medium
-
tzdataDebian tzdata - new upstream version No score - ubuntu network-manager, canonical ubuntu linux +1 more Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before... 4.6 Medium
- hp capture and route software Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1... 2.7 Low
- ibm websphere mq Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM... 4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 more The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2,... 5.0 Medium
- ibm curam social program management IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6... 5.0 Medium
- ibm curam social program management Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, ... 6.8 Medium
- oxide project oxide, canonical ubuntu linux +1 more Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows... 6.8 Medium
- hp tippingpoint security management system, tippingpoint virtual security management system +1 more HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management... 7.5 High
- hp storage data protector Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote... 9.0 High
- ibm websphere application server WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before... 9.3 High
- ibm websphere application server Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5... 8.5 High
- ibm websphere application server IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly... 5.5 Medium
- ibm websphere application server The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not... 4.0 Medium
-
wordpressMageia Updated wordpress packages fix security vulnerabilities No score - apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 more The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4... 6.8 Medium
- ibm websphere portal Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1... 4.3 Medium
- ibm websphere portal The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27,... 7.8 High
- ffmpeg, debian linux +1 more Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg... 6.8 Medium
- sqlite, apple mac os x, watchos +3 more +5 more The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement... 7.5 High
- redhat jboss operations network Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which... 9.0 High
- tvmobili Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote... 5.0 Medium
- tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow... 4.3 Medium
- tinywebgallery Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8... 6.8 Medium
- zen-cart zen cart Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote... 5.8 Medium
- dounokouno transmitmail Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote... 5.0 Medium
- dounokouno transmitmail Cross-site scripting (XSS) vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows... 4.3 Medium
- Show olderLoading…