Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
April

CVEs published in April 2015

509 vulnerabilities, 40 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

apple iphone os, mac os x, tvos +2 moreThe kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not...CVE-2015-11027.1 HighApril 10, 2015
apple iphone os, mac os x, tvos +2 moreThe kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows...CVE-2015-11016.9 MediumApril 10, 2015
apple iphone os, mac os x, tvos +2 moreThe kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows...CVE-2015-1100Public exploit5.4 MediumApril 10, 2015
apple iphone os, mac os x, tvos +2 moreRace condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3,...CVE-2015-10994.0 MediumApril 10, 2015
apple iphone os, mac os x +1 moreiWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute...CVE-2015-10987.3 HighApril 10, 2015
apple iphone os, tvos +1 moreIOMobileFramebuffer in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain...CVE-2015-10971.9 LowApril 10, 2015
apple iphone os, mac os x, tvos +2 moreIOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows...CVE-2015-10961.9 LowApril 10, 2015
apple iphone os, mac os x, tvos +2 moreIOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows...CVE-2015-10957.2 HighApril 10, 2015
apple iphone os, tvos +1 moreIOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain...CVE-2015-10941.9 LowApril 10, 2015
apple iphone os, mac os x +1 moreFontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to...CVE-2015-10936.8 MediumApril 10, 2015
apple iphone os, tvos +1 moreNSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers...CVE-2015-10925.0 MediumApril 10, 2015
apple iphone os, mac os x +1 moreThe CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not...CVE-2015-10914.3 MediumApril 10, 2015
apple iphone osCFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state...CVE-2015-10905.0 MediumApril 10, 2015
apple iphone os, mac os x +1 moreCFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies...CVE-2015-10895.0 MediumApril 10, 2015
apple iphone os, mac os x +1 moreCFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs,...CVE-2015-10886.8 MediumApril 10, 2015
apple iphone osDirectory traversal vulnerability in Backup in Apple iOS before 8.3 allows attackers to read...CVE-2015-10872.1 LowApril 10, 2015
apple iphone os, tvos +1 moreThe Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly...CVE-2015-10866.9 MediumApril 10, 2015
apple iphone osAppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation...CVE-2015-10851.9 LowApril 10, 2015
apple safariThe private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and...CVE-2015-1127Fix available2.1 LowApril 10, 2015
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x...CVE-2015-1122Fix available6.8 MediumApril 10, 2015
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x...CVE-2015-1120Fix available6.8 MediumApril 10, 2015
wesnoth battle for wesnoth, fedoraproject fedora +1 moreThe WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote...CVE-2015-0844Fix available5.0 MediumApril 10, 2015
qt-creator MageiaUpdated qt-creator packages fix security vulnerabilitiesMGASA-2015-0137Fix availableNo scoreApril 9, 2015
suricata MageiaUpdated suricata packages fix security vulnerabilitiesMGASA-2015-0135Fix availableNo scoreApril 9, 2015
mediawiki checkuserCross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows...CVE-2015-2940Fix available6.8 MediumApril 9, 2015
mediawiki scribuntoCross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote...CVE-2015-2939Fix available4.3 MediumApril 9, 2015
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...CVE-2015-2938Fix available4.3 MediumApril 9, 2015
mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend...CVE-2015-2937Fix available7.1 HighApril 9, 2015
mediawikiMediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers...CVE-2015-2936Fix available7.1 HighApril 9, 2015
mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to...CVE-2015-2935Fix available5.0 MediumApril 9, 2015
mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle...CVE-2015-2934Fix available4.3 MediumApril 9, 2015
mediawikiCross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x...CVE-2015-2933Fix available4.3 MediumApril 9, 2015
mediawikiIncomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x...CVE-2015-2932Fix available4.3 MediumApril 9, 2015
mediawikiIncomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24,...CVE-2015-2931Fix available4.3 MediumApril 9, 2015
gnu less, opensuse +1 moreThe is_utf8_well_formed function in GNU less before 475 allows remote attackers to have...CVE-2014-9488Fix available10.0 HighApril 9, 2015
linux kernelArray index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel...CVE-2015-4036Fix available7.2 HighApril 9, 2015
hackerone ruby, debian linux, puppet agent +2 more +4 moreverify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x...CVE-2015-1855Public exploitFix available5.9 MediumApril 9, 2015
debian dpkg, canonical ubuntu linux +1 moreThe dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote...CVE-2015-0840Fix available4.3 MediumApril 9, 2015
x.org libx11, x11, canonical ubuntu linux +1 more +3 moreMultiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint...CVE-2013-7439Fix available7.5 HighApril 9, 2015
mcafee advanced threat defenseThe web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote...CVE-2015-30304.0 MediumApril 8, 2015
mcafee advanced threat defenseThe web interface in McAfee Advanced Threat Defense (MATD) before 3.4.4.63 does not properly...CVE-2015-30294.0 MediumApril 8, 2015
mcafee advanced threat defenseMcAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass...CVE-2015-30285.5 MediumApril 8, 2015
siemens winccSiemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC...CVE-2015-28236.8 MediumApril 8, 2015
siemens winccSiemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC...CVE-2015-28224.3 MediumApril 8, 2015
mozilla firefox, oracle solaris +1 moreThe Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre...CVE-2015-07985.0 MediumApril 8, 2015
broadcom spectrumCA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects,...CVE-2015-28289.0 HighApril 8, 2015
broadcom spectrumCross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows...CVE-2015-28273.5 LowApril 8, 2015
apache flexCross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14...CVE-2015-17734.3 MediumApril 8, 2015
bblog project bblogCross-site request forgery (CSRF) vulnerability in bBlog allows remote attackers to hijack the...CVE-2015-09056.8 MediumApril 8, 2015
ntpThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2...CVE-2015-1798Fix available1.8 LowApril 8, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open