CVEs published in April 2015
509 vulnerabilities, 40 critical, 6 exploited.
- hidemaru editorBuffer overflow in Saitoh Kikaku Maruo Editor 8.51 and earlier allows remote attackers to execute...7.5 High
- semperfiwebdesign all in one seo packThe Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the...5.0 Medium
- cisco unified communications domain managerSQL injection vulnerability in the Image Management component in Cisco Unified Communications...6.5 Medium
- cisco unified communications domain managerCisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain...4.0 Medium
- cisco unified communications domain managerCisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute...6.5 Medium
- cisco prime data center network manager (dcnm), prime data center network manager +1 moreDirectory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network...7.8 High
- schneider-electric vampsetMultiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain...4.4 Medium
- hospira mednetHospira MedNet Use of Hard-coded Password9.0
- hospira mednetHospira MedNet Use of Hard-coded Cryptographic Key6.8
- hospira mednetHospira MedNet Password in Configuration File6.8
- cisco iosThe SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch...6.3 Medium
- cisco nx-osThe SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High...6.3 Medium
- cisco ios xeCisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which...7.8 High
- canonical ubuntu linuxThe Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04...2.1 Low
- apache subversion, opensuse +1 moreThe mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a...7.8 High
tiffUbuntutiff regressionNo score- typo3 neosTYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and...6.5 Medium
- sap afariaBuffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial...5.0 Medium
- sap sql anywhereSAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash)...5.0 Medium
- sap mobile platformXML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send...5.0 Medium
- sap netweaverThe SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive...5.0 Medium
- sap afariaThe XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote...7.5 High
- sap netweaverBuffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000...6.5 Medium
- sap clinical task tracker, emr unwired +1 moreSAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile...6.4 Medium
- sap mobile platformXML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send...5.0 Medium
- sap netweaver enterprise portalXML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31...5.0 Medium
- sap netweaver enterprise portalXML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31...5.0 Medium
- ab google map travel project google map travelMultiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map Travel (AB-MAP)...6.8 Medium
- xen, fedoraproject fedora +1 moreThe XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough...4.9 Medium
- xen, fedoraproject fedora +1 moreXen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with...7.1 High
- netgate pfsenseMultiple cross-site scripting (XSS) vulnerabilities in the WebGUI in pfSense before 2.2.1 allow...4.3 Medium
- openstack novaOpenStack Compute (Nova) has Insufficient Verification of Data Authenticity5.1 Medium
owncloudMageiaUpdated owncloud packages fix security vulnerabilitiesNo scoretorMageiaUpdated tor packages fix security vulnerabilitiesNo score- rope project ropeCode injection in rope9.8 Critical
- mozilla firefoxMozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows...4.3 Medium
- mozilla firefoxThe PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fennec) before 37.0 on...5.0 Medium
- google bionicThe PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses...5.0 Medium
- synology diskstation managerThe Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently...5.0 Medium
- ibm security access manager for web 7.0 firmware, security access manager for web 8.0 firmware +1 moreThe Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12...5.0 Medium
- gnu mailman, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,...7.6 High
- pcre, mariadb, opensuse +1 more +3 moreThe pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile...5.5 Medium
- pcre, mariadb, opensuse +1 more +3 moreThe compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile...7.8 High
- google chromeRace condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0...6.8 Medium
- google chromeGoogle Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad...7.5 High
- mozilla firefox, thunderbird +1 moreMozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not...5.0 Medium
- mozilla firefox, thunderbird +1 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0,...7.5 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 allow...7.5 High
- mozilla firefox, thunderbird +1 moreUse-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0,...5.1 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on...4.3 Medium
- Show moreLoading…