Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
April

CVEs published in April 2015

509 vulnerabilities, 40 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

juniper junosJuniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15,...CVE-2015-30026.9 MediumApril 10, 2015
quassel-irc quasselStack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1...CVE-2015-2779Fix available5.0 MediumApril 10, 2015
quassel-irc quasselQuassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows...CVE-2015-2778Fix available5.0 MediumApril 10, 2015
netgate pfsenseCross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the...CVE-2015-2295Public exploitEPSS 65.7%6.8 MediumApril 10, 2015
redhat openstackThe puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a...CVE-2015-1842Fix available10.0 HighApril 10, 2015
freebsdThe bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS...CVE-2015-14152.1 LowApril 10, 2015
apple xcodeInteger overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent...CVE-2015-11497.5 HighApril 10, 2015
apple mac os xScreen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which...CVE-2015-11485.0 MediumApril 10, 2015
apple mac os xOpen Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in...CVE-2015-11475.0 MediumApril 10, 2015
apple mac os xThe Code Signing implementation in Apple OS X before 10.10.3 does not properly validate...CVE-2015-11461.9 LowApril 10, 2015
apple mac os xThe Code Signing implementation in Apple OS X before 10.10.3 does not properly validate...CVE-2015-11451.9 LowApril 10, 2015
apple mac os xBuffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local...CVE-2015-11447.2 HighApril 10, 2015
apple mac os xLaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted...CVE-2015-11437.2 HighApril 10, 2015
apple mac os xLaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service ...CVE-2015-11422.1 LowApril 10, 2015
apple mac os xThe mach_vm_read functionality in the kernel in Apple OS X before 10.10.3 allows local users to...CVE-2015-11414.9 MediumApril 10, 2015
apple mac os xBuffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges...CVE-2015-1140Public exploit7.2 HighApril 10, 2015
apple mac os xImageIO in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a...CVE-2015-11396.8 MediumApril 10, 2015
apple mac os xHypervisor in Apple OS X before 10.10.3 allows local users to cause a denial of service via...CVE-2015-11384.9 MediumApril 10, 2015
apple mac os xThe NVIDIA graphics driver in Apple OS X before 10.10.3 allows local users to gain privileges or...CVE-2015-11377.2 HighApril 10, 2015
apple mac os xUse-after-free vulnerability in CoreAnimation in Apple OS X before 10.10.3 allows remote...CVE-2015-11366.8 MediumApril 10, 2015
apple mac os xfontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain...CVE-2015-11357.2 HighApril 10, 2015
apple mac os xfontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain...CVE-2015-11347.2 HighApril 10, 2015
apple mac os xfontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain...CVE-2015-11337.2 HighApril 10, 2015
apple mac os xfontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain...CVE-2015-113210.0 HighApril 10, 2015
apple mac os xfontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain...CVE-2015-11317.2 HighApril 10, 2015
apple os x, mac os x +1 moreThe XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to...CVE-2015-1130In KEVPublic exploit7.8 HighApril 10, 2015
apple safari, iphone os +1 moreApple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509...CVE-2015-11294.3 MediumApril 10, 2015
apple safariThe private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x...CVE-2015-11285.0 MediumApril 10, 2015
apple safari, iphone os +1 moreWebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x...CVE-2015-11264.3 MediumApril 10, 2015
apple iphone osThe touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to...CVE-2015-11254.3 MediumApril 10, 2015
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x...CVE-2015-11246.8 MediumApril 10, 2015
apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to...CVE-2015-11236.8 MediumApril 10, 2015
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x...CVE-2015-11216.8 MediumApril 10, 2015
apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x...CVE-2015-11196.8 MediumApril 10, 2015
apple iphone os, mac os x, tvos +2 morelibnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows...CVE-2015-11185.0 MediumApril 10, 2015
apple iphone os, mac os x, tvos +2 moreThe (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8...CVE-2015-11176.9 MediumApril 10, 2015
apple iphone osThe UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the...CVE-2015-11162.1 LowApril 10, 2015
apple iphone osThe Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection...CVE-2015-11154.4 MediumApril 10, 2015
apple iphone os, tvos +1 moreThe Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers...CVE-2015-11141.9 LowApril 10, 2015
apple iphone osThe Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the (1) telephone...CVE-2015-11131.9 LowApril 10, 2015
apple safari, iphone os +1 moreApple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, as used on iOS before 8.3 and...CVE-2015-11125.0 MediumApril 10, 2015
apple iphone osSafari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history...CVE-2015-11115.0 MediumApril 10, 2015
apple iphone os, tvos +1 moreThe Podcasts component in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to...CVE-2015-11105.0 MediumApril 10, 2015
apple iphone osNetworkExtension in Apple iOS before 8.3 stores credentials in VPN configuration logs, which...CVE-2015-11092.1 LowApril 10, 2015
apple iphone osThe Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on...CVE-2015-11082.1 LowApril 10, 2015
apple iphone osThe Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature...CVE-2015-11071.9 LowApril 10, 2015
apple iphone osThe QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically...CVE-2015-11062.1 LowApril 10, 2015
apple iphone os, mac os x, tvos +2 moreThe TCP implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and...CVE-2015-11055.0 MediumApril 10, 2015
apple iphone os, mac os x, tvos +2 moreThe kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not...CVE-2015-11045.0 MediumApril 10, 2015
apple iphone os, mac os x, tvos +2 moreThe kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes...CVE-2015-11037.5 HighApril 10, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open