CVEs published in April 2015
509 vulnerabilities, 40 critical, 6 exploited.
- alfrescoCross-site request forgery (CSRF) vulnerability in the Alfresco module before 6.x-1.3 for Drupal...5.8 Medium
- nodeauthor project nodeauthorCross-site scripting (XSS) vulnerability in the nodeauthor module for Drupal allows remote...3.5 Low
- levelteninteractive content analysisCross-site scripting (XSS) vulnerability in the Content Analysis module before 6.x-1.7 for Drupal...4.3 Medium
- joshics contact form fieldsCross-site request forgery (CSRF) vulnerability in the Contact Form Fields module before 6.x-2.3...6.8 Medium
- video project videoCross-site scripting (XSS) vulnerability in the Video module before 7.x-2.11 for Drupal, when...3.5 Low
- linkit project linkitCross-site scripting (XSS) vulnerability in the Linkit module before 7.x-2.7 and 7.x-3.x before 7...2.1 Low
- term merge project mergeCross-site scripting (XSS) vulnerability in the Term Merge module before 7.x-1.2 for Drupal...3.5 Low
- room reservations project reservationsMultiple cross-site scripting (XSS) vulnerabilities in the Room Reservations module before 7.x-1...3.5 Low
- tadaa\! project tadaa\!Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow...5.8 Medium
- wishlist project wishlistCross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before...3.5 Low
- tadaa\! project tadaa\!Multiple cross-site request forgery (CSRF) vulnerabilities in the Tadaa! module before 7.x-1.4...6.8 Medium
- batch jobs project jobsMultiple cross-site request forgery (CSRF) vulnerabilities in the Batch Jobs module before 7.x-1...6.8 Medium
- wishlist project wishlistCross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x...5.8 Medium
- field display label project display labelCross-site scripting (XSS) vulnerability in the Field Display Label module before 7.x-1.3 for...3.5 Low
- jammer project jammerMultiple cross-site request forgery (CSRF) vulnerabilities in the Jammer module before 6.x-1.8...6.8 Medium
- log watcher project watcherMultiple cross-site request forgery (CSRF) vulnerabilities in the Log Watcher module before 6.x-1...6.8 Medium
- todo filter project filterCross-site request forgery (CSRF) vulnerability in the Todo Filter module before 6.x-1.1 and 7.x...6.8 Medium
- htaccess project htaccessMultiple cross-site request forgery (CSRF) vulnerabilities in the Htaccess module before 7.x-2.3...6.8 Medium
- cloudwords for multilingualCross-site scripting (XSS) vulnerability in the Cloudwords for Multilingual Drupal module before...3.5 Low
- cloudwords for multilingualCross-site request forgery (CSRF) vulnerability in the Cloudwords for Multilingual Drupal module...6.8 Medium
- wikiwiki project wikiwikiSQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote...7.5 High
- phplist integration project integrationSQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows...6.5 Medium
- dlc solutions courseCross-site scripting (XSS) vulnerability in the Course module 6.x-1.x before 6.x-1.2 and 7.x-1.x...3.5 Low
- opac project opacCross-site request forgery (CSRF) vulnerability in the OPAC module before 7.x-2.3 for Drupal...6.8 Medium
- ubercart currency conversion project currency conversionOpen redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal...5.8 Medium
- ibm dominoIBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to...10.0 High
- simple ads manager project ads managerUnrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin...7.5 High
- new atlanta bluedragonDirectory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet)...7.5 High
- landesk management suiteMultiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and...6.8 Medium
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...5.8 Medium
- w1.fi wpa supplicantwpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote...5.9 Medium
- microsoft win32k, windows 2003 server, windows 7 +2 more +4 moreWin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server...7.8 High
- debian linux, linux kernel +1 moreA certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not...4.9 Medium
- mozilla firefoxRace condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before...6.8 Medium
- cisco unified meetingplaceCross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Unified...4.3 Medium
- cisco unified meetingplaceUnrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco...9.0 High
- qemu, debian linux +1 moreThe (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have...4.9 Medium
- django-markupfield project django-markupfielddjango-markupfield Arbitrary File Read5.0 Medium
- google chrome, debian linux, opensuse +2 moreGoogle Chrome before 42.0.2311.90 does not always ask the user before proceeding with...4.3 Medium
- google chrome, opensuse +1 moreThe NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux...7.5 High
- google chrome, debian linux, opensuse +2 morebrowser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not...4.3 Medium
- google chrome, debian linux +1 moreThe FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the...4.3 Medium
- google chrome, debian linux +1 moreThe SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines...5.0 Medium
- google chrome, debian linux +1 moreUse-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views...6.8 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome...7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to...7.5 High
- google chrome, debian linux +1 moreBlink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of...5.0 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moreThe URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42...5.0 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreThe ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4...7.5 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreGoogle Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation...4.3 Medium
- Show moreLoading…