Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
April

CVEs published in April 2015

509 vulnerabilities, 40 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle jd edwards productsUnspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD...CVE-2015-04754.0 MediumApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...CVE-2015-0474Public exploit1.5 LowApril 16, 2015
oracle enterprise manager grid controlUnspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise...CVE-2015-04734.3 MediumApril 16, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2015-04723.5 LowApril 16, 2015
oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-04714.4 MediumApril 16, 2015
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via...CVE-2015-04704.3 MediumApril 16, 2015
oracle retail applicationsUnspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail...CVE-2015-04664.3 MediumApril 16, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2015-04654.0 MediumApril 16, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2015-04645.0 MediumApril 16, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2015-04634.0 MediumApril 16, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Transportation Management component in Oracle Supply...CVE-2015-04624.0 MediumApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1...CVE-2015-04617.0 HighApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11...CVE-2015-04564.3 MediumApril 16, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2015-04533.3 LowApril 16, 2015
oracle vm serverUnspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems...CVE-2015-04524.3 MediumApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04...CVE-2015-04513.5 LowApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11...CVE-2015-04504.3 MediumApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2015-04495.0 MediumApril 16, 2015
oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality...CVE-2015-04487.2 HighApril 16, 2015
oracle e-business suiteUnspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E...CVE-2015-04474.3 MediumApril 16, 2015
oracle right now service cloudUnspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2...CVE-2015-04405.0 MediumApril 16, 2015
hotspotexpress hotex billing managerHotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie...CVE-2015-33195.0 MediumApril 16, 2015
tzdata Debiantzdata - new upstream versionDLA-201-1Fix availableNo scoreApril 16, 2015
canonical ubuntu linux, debian linux, point-to-point protocol project protocol +2 moreBuffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4...CVE-2015-3310Fix available4.3 MediumApril 16, 2015
ibm tivoli storage manager fastbackStack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6...CVE-2015-18987.2 HighApril 15, 2015
ibm tivoli storage manager fastbackStack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6...CVE-2015-18977.2 HighApril 15, 2015
lhaplusBuffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a...CVE-2015-09076.8 MediumApril 15, 2015
lhaplusDirectory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to...CVE-2015-09065.8 MediumApril 15, 2015
cisco unified communications domain managerSQL injection vulnerability in the Interactive Voice Response (IVR) component in Cisco Unified...CVE-2015-06995.0 MediumApril 15, 2015
cisco web security applianceMultiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on...CVE-2015-06984.3 MediumApril 15, 2015
cisco telepresence tc softwareOpen redirect vulnerability in the login page in Cisco TC Software before 6.3-26 and 7.x before 7...CVE-2015-06975.8 MediumApril 15, 2015
cisco telepresence tc softwareCross-site scripting (XSS) vulnerability in the login page in Cisco TC Software before 7.1.0 on...CVE-2015-06964.3 MediumApril 15, 2015
cisco web security applianceCisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict...CVE-2015-06937.2 HighApril 15, 2015
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before...CVE-2015-0345Public exploit4.3 MediumApril 15, 2015
dest-unreach socatThe signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to...CVE-2015-1379Fix available7.5 HighApril 15, 2015
librsync project librsynclibrsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for...CVE-2014-8242Fix available5.8 MediumApril 15, 2015
inspircd, debian linux +1 moreBuffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy...CVE-2015-6674Fix available9.8 CriticalApril 15, 2015
sixapart movabletypeFormat string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro...CVE-2015-0845Fix available7.5 HighApril 15, 2015
debian linux, gstreamer, mozilla firefox +11 more +13 moreGStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...CVE-2015-0797Fix available6.8 MediumApril 15, 2015
inspire ircd inspircd, debian linux +1 moreInspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).CVE-2012-6697Fix available7.5 HighApril 15, 2015
inspircdinspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This...CVE-2012-6696Fix available9.8 CriticalApril 15, 2015
hp support solution frameworkHP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary...CVE-2015-21146.8 MediumApril 14, 2015
hp easy toolsUnspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools...CVE-2015-211310.0 HighApril 14, 2015
hp easy toolsUnspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools...CVE-2015-21129.0 HighApril 14, 2015
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2015-1668EPSS 15.7%9.3 HighApril 14, 2015
microsoft internet explorerMicrosoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or...CVE-2015-1667EPSS 12.9%9.3 HighApril 14, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2015-1666EPSS 12.9%9.3 HighApril 14, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-1665EPSS 15.7%9.3 HighApril 14, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-1662EPSS 12.9%9.3 HighApril 14, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection...CVE-2015-1661EPSS 14.6%4.3 MediumApril 14, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open