Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
April

CVEs published in April 2015

509 vulnerabilities, 40 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

google chrome, canonical ubuntu linux, debian linux +2 moregpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0...CVE-2015-1240Fix available5.0 MediumApril 19, 2015
google chrome, canonical ubuntu linux, debian linux +2 moreSkia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of...CVE-2015-1238Fix available7.5 HighApril 19, 2015
google chrome, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content...CVE-2015-1237Fix available7.5 HighApril 19, 2015
google chrome, canonical ubuntu linux, debian linux +2 moreThe MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode...CVE-2015-1236Fix available4.3 MediumApril 19, 2015
google chrome, canonical ubuntu linux, debian linux +2 moreThe ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in...CVE-2015-1235Fix available5.0 MediumApril 19, 2015
perl-Module-Signature MageiaUpdated perl-Module-Signature packages fix security vulnerabilitiesMGASA-2015-0160Fix availableNo scoreApril 18, 2015
searchbloxCross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers...CVE-2015-09708.8 HighApril 18, 2015
searchbloxSearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true...CVE-2015-0969EPSS 13.4%5.0 MediumApril 18, 2015
searchbloxUnrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows...CVE-2015-09687.5 HighApril 18, 2015
searchbloxMultiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote...CVE-2015-09674.3 MediumApril 18, 2015
tp-link archer c5 firmware, archer c7 firmware, archer c8 firmware +9 more +11 moreDirectory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0...CVE-2015-3035In KEVEPSS 83.9%7.5 HighApril 17, 2015
blue coat malware analysis appliancesearch.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312...CVE-2015-09385.0 MediumApril 17, 2015
blue coat malware analysis applianceCross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis...CVE-2015-09374.3 MediumApril 17, 2015
cisco secure access control server solution engineCross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and...CVE-2015-07006.8 MediumApril 17, 2015
cisco ios xrCisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is...CVE-2015-06957.8 HighApril 17, 2015
cisco secure desktopA certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows...CVE-2015-06919.3 HighApril 17, 2015
emc networkerBuffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1...CVE-2015-05307.2 HighApril 17, 2015
openstack swift, canonical ubuntu linux +1 moreOpenStack Swift Unauthorized delete of versioned Swift objectCVE-2015-1856Fix available5.5 MediumApril 17, 2015
openstack keystonemiddleware, python-keystoneclient, canonical ubuntu linux +2 moreOpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacksCVE-2015-1852Fix available4.3 MediumApril 17, 2015
lenovo thinkserver system manager baseboard management controller firmwareThe ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476...CVE-2015-33244.3 MediumApril 16, 2015
lenovo thinkserver system manager baseboard management controller firmwareThe ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476...CVE-2015-33235.0 MediumApril 16, 2015
lenovo thinkserver rd350, thinkserver rd350 firmware, thinkserver rd450 +7 more +9 moreLenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak...CVE-2015-33225.0 MediumApril 16, 2015
lenovo usb enhanced performance keyboardLenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code...CVE-2015-33202.1 LowApril 16, 2015
usaa mobile bankingThe USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used...CVE-2015-13142.1 LowApril 16, 2015
lixil my satis genius toiletThe LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth...CVE-2013-48663.3 LowApril 16, 2015
apport Ubuntuapport vulnerabilityUSN-2569-2Fix availableNo scoreApril 16, 2015
oracle health sciences applicationsUnspecified vulnerability in the Oracle Health Sciences Argus Safety component in Oracle Health...CVE-2015-25792.1 LowApril 16, 2015
oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect...CVE-2015-25787.1 HighApril 16, 2015
oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality,...CVE-2015-25777.2 HighApril 16, 2015
mysql, debian linux, suse linux enterprise desktop +2 more +4 moreImproper Access Control in MySQL Connectors JavaCVE-2015-2575Fix available4.9 MediumApril 16, 2015
oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality...CVE-2015-25742.1 LowApril 16, 2015
oracle hyperion smart view for officeUnspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle...CVE-2015-2572Public exploit4.6 MediumApril 16, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products...CVE-2015-25706.5 MediumApril 16, 2015
oracle e-business suiteUnspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 11.5...CVE-2015-25654.3 MediumApril 16, 2015
oracle commerce platformUnspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9...CVE-2015-05104.3 MediumApril 16, 2015
oracle hyperionUnspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11...CVE-2015-05094.3 MediumApril 16, 2015
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2015-05042.6 LowApril 16, 2015
oracle siebel crmUnspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2...CVE-2015-05024.3 MediumApril 16, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise Portal Interaction Hub component in Oracle...CVE-2015-04974.3 MediumApril 16, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2015-04964.0 MediumApril 16, 2015
oracle commerce experience manager, commerce guided search +1 moreUnspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...CVE-2015-04957.5 HighApril 16, 2015
oracle retail applicationsUnspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail...CVE-2015-04944.3 MediumApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...CVE-2015-0493Public exploit1.5 LowApril 16, 2015
oracle supply chain products suiteUnspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle...CVE-2015-04904.9 MediumApril 16, 2015
oracle e-business suite application management packUnspecified vulnerability in the Application Management Pack for Oracle E-Business Suite...CVE-2015-04891.2 LowApril 16, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...CVE-2015-04874.0 MediumApril 16, 2015
opensuse, oracle jdk, jre +2 moreUnspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect...CVE-2015-04865.0 MediumApril 16, 2015
oracle peoplesoft productsUnspecified vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component in Oracle...CVE-2015-04853.5 LowApril 16, 2015
oracle fusion middlewareUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12...CVE-2015-04826.0 MediumApril 16, 2015
oracle sql trace analyzerUnspecified vulnerability in the SQL Trace Analyzer component in Oracle Support Tools before 12.1...CVE-2015-04765.5 MediumApril 16, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open