CVEs published in April 2015
509 vulnerabilities, 40 critical, 6 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft sharepoint foundation, sharepoint server +1 moreCross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft office compatibility pack, word, word viewer +2 moreUse-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility...9.3 High
- microsoft office, office compatibility pack, office web apps +3 more +5 moreUse-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word...9.3 High
- microsoft office, office compatibility pack, office web apps +3 more +5 moreUse-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word...9.3 High
- microsoft .net frameworkASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when...2.6 Low
- microsoft windows 8.1, windows server 2012 +1 moreVirtual Machine Manager (VMM) in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2...2.1 Low
- microsoft xml core servicesMicrosoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin...4.3 Medium
- microsoft windows 7, windows server 2003, windows server 2008 +1 more +3 moreMicrosoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreMicrosoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreMicrosoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows...7.2 High
- microsoft office, office compatibility pack, office web apps +3 more +5 moreMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word...7.8 High
- microsoft project serverCross-site scripting (XSS) vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows...4.3 Medium
- microsoft officeCross-site scripting (XSS) vulnerability in Microsoft Office for Mac 2011 allows remote attackers...4.3 Medium
- microsoft windows server 2012Microsoft Active Directory Federation Services (AD FS) 3.0 on Windows Server 2012 R2 does not...5.8 Medium
- microsoft http.sys, windows 7, windows 8 +3 more +5 moreHTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and...10.0 High
- microsoft windows 7, windows server 2008 +1 moreTask Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to...7.2 High
- fortinet fortimailFortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag...4.0 Medium
- zoneo-soft phptrafficaCross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and...4.3 Medium
- hotspot express hotex billing managerCross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx...4.3 Medium
- palo alto networks trapsMultiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface...4.3 Medium
- shareaholicCross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0...3.5 Low
- fiyo cmsMultiple cross-site scripting (XSS) vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to...4.3 Medium
- fiyo cmsMultiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute...7.5 High
- apport project apportThe crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to...7.2 High
- mediawikiMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows...7.1 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...4.3 Medium
- bittorrent syncBitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.9.3 High
- facebook hiphop virtual machineCross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka...4.3 Medium
- cisco adaptive security appliance softwareThe XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6...7.8 High
- cisco adaptive security appliance softwareThe DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16),...7.1 High
- cisco adaptive security appliance softwareThe failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before...8.3 High
ia32-libsDebian,ia32-libs-gtkDebian +1 moreia32-libs - security updateNo score- das watchdog project watchdogBuffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root...7.2 High
- chronychrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP...6.5 Medium
- tuxfamily chrony, debian linux +1 morechrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged...6.5 Medium
- tuxfamily chrony, debian linux +1 moreHeap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a...6.5 Medium
- cisco asr 9001, asr 9006, asr 9010 +4 more +6 moreCisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a...5.0 Medium
- cisco web security applianceCisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict...7.2 High
- cisco asa cx context-aware security software, asa with firepower services +1 moreThe virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1...7.8 High
- debian dbd-firebird, linux +1 moreMultiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird...10.0 High
- boosted boardsUnspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to...8.3 High
- apple xcodeClang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way...5.0 Medium
- digium asterisk, certified asterisk +1 moreAsterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x...4.3 Medium
- juniper junosCross-site scripting (XSS) vulnerability in the Dynamic VPN in Juniper Junos 12.1X44 before 12...4.3 Medium
- juniper junosJ-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35, 12.1X46 before 12.1X46...4.3 Medium
- juniper junosJuniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20,...7.2 High
- Show moreLoading…