CVEs published in April 2015
509 vulnerabilities, 40 critical, 6 exploited.
- saurus cmsMultiple cross-site scripting (XSS) vulnerabilities in the print_language_selectbox function in...4.3 Medium
- cisco wireless lan controller softwareCross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller...4.3 Medium
libxml2Debianlibxml2 - regression updateNo score- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers...7.5 High
- simple ads manager project ads managerMultiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for...7.5 High
- ericsson drutt mobile service delivery platformOpen redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform...5.8 Medium
- ericsson drutt mobile service delivery platformDirectory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service...5.0 Medium
- ericsson drutt mobile service delivery platformMultiple cross-site scripting (XSS) vulnerabilities in the Report Viewer in Ericsson Drutt Mobile...4.3 Medium
- redhat dockerThe Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to...4.3 Medium
- siemens simatic step 7Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data...2.1 Low
- siemens simatic step 7Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle...6.8 Medium
- c-board moyuku project moyukuUnrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows...7.5 High
- the tor project torThe Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,...7.5 High
- the tor project torThe Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12,...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly...6.9 Medium
- arj software archiver, debian linux, fedoraproject fedora +2 moreBuffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of...7.5 High
- ibm websphere datapower xc10 appliance firmwareThe IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack...6.8 Medium
- ibm general parallel file system/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7...3.5 Low
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle...4.3 Medium
- arj software archiver, fedoraproject fedora +1 moreOpen-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which...5.8 Medium
- arj software archiver, fedoraproject fedora +1 moreOpen-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks...5.8 Medium
- ibm dominoNotes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3...7.2 High
- ibm dominoBuffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2...10.0 High
- ibm tivoli storage manager fastbackFastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote...7.5 High
- ibm dominoThe LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows...10.0 High
- ibm rational clearcaseThe MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2...9.4 High
- qualiteam x-cartX-Cart before 5.1.11 allows remote authenticated users to read or delete address data of...6.5 Medium
- qualiteam x-cartCross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows...4.3 Medium
- antlabs inngate ig 3.00 e, inngate ig 3.01 e, inngate ig 3.02 e +4 more +6 moreThe ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E,...10.0 High
- emc powerpath virtual applianceEMC PowerPath Virtual Appliance (aka vApp) before 2.0 has default passwords for the (1) emcupdate...5.0 Medium
- kanaka novncnoVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it...4.3 Medium
- hp intelligent provisioningUnspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008...2.1 Low
- cisco ios xeCisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when...7.1 High
- cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- cisco unity connectionThe call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6...7.1 High
- cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- cisco unity connection, unity connection 8.5, unity connection 8.6 +2 moreThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- citrix netscalerCitrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass...5.0 Medium
- citrix netscalerCross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before...4.3 Medium
- citrix netscalerThe Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when...4.3 Medium
- citrix netscalerCross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5...6.8 Medium
- apache cassandraImproper Neutralization of Special Elements used in a Command in Apache Cassandra7.5 High
- inductiveautomation ignitionInductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context...5.0 Medium
- inductiveautomation ignitionInductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force...4.0 Medium
- inductiveautomation ignitionInductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which...6.4 Medium
- inductiveautomation ignitionInductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local...2.1 Low
- inductiveautomation ignitionInductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by...5.0 Medium
- ecava integraxorUntrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local...4.4 Medium
- inductiveautomation ignitionCross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote...4.3 Medium
- Show moreLoading…