Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
May

CVEs published in May 2015

411 vulnerabilities, 93 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

free-counter free counterCross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows...CVE-2015-4084Public exploit4.3 MediumMay 28, 2015
arubanetworks clearpass policy managerDirectory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4...CVE-2015-15514.0 MediumMay 28, 2015
arubanetworks clearpass policy managerDirectory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5...CVE-2015-15509.0 HighMay 28, 2015
arubanetworks clearpass policy managerMultiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6...CVE-2015-13926.5 MediumMay 28, 2015
arubanetworks clearpass policy managerCross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before...CVE-2015-1389Public exploit4.3 MediumMay 28, 2015
arubanetworks clearpass policy managerAruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to...CVE-2014-66289.0 HighMay 28, 2015
apple iphone os, itunes, mac os x +2 moreCoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service ...CVE-2015-1157Public exploit7.8 HighMay 28, 2015
tri gigpressMultiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9...CVE-2015-4066Public exploit6.5 MediumMay 27, 2015
landing pages project pagesCross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the...CVE-2015-4065Public exploit3.5 LowMay 27, 2015
landing pages project pagesSQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1...CVE-2015-4064Public exploit6.5 MediumMay 27, 2015
newstatpress project newstatpressCross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin...CVE-2015-4063Public exploit3.5 LowMay 27, 2015
newstatpress project newstatpressSQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9...CVE-2015-4062Public exploit6.5 MediumMay 27, 2015
coppermine-gallery coppermine photo galleryOpen redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote...CVE-2015-39225.8 MediumMay 27, 2015
coppermine-gallery coppermine photo galleryCross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36...CVE-2015-39213.5 LowMay 27, 2015
nokogiri, redhat cloudforms management engine, enterprise mrg +5 more +7 moreNokogiri is vulnerable to XML External Entity (XXE) attackCVE-2012-6685Fix available7.5 HighMay 27, 2015
wiresharkThe logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark...CVE-2015-3906Fix available5.0 MediumMay 26, 2015
wiresharkThe detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1...CVE-2015-3815Fix available5.0 MediumMay 26, 2015
wiresharkThe fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark...CVE-2015-3813Fix available5.0 MediumMay 26, 2015
wiresharkepan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5...CVE-2015-3810Fix available7.8 HighMay 26, 2015
wiresharkThe dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in...CVE-2015-3809Fix available7.8 HighMay 26, 2015
wiresharkThe dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in...CVE-2015-3808Fix available7.8 HighMay 26, 2015
moxa vport activex sdk plusMultiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote...CVE-2015-09867.5 HighMay 26, 2015
sap afariaBuffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to...CVE-2015-40927.5 HighMay 26, 2015
sap netweaver application server javaXML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to...CVE-2015-40917.5 HighMay 26, 2015
osisoft pi sql for af, pi server +1 moreOSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted...CVE-2015-10136.5 MediumMay 26, 2015
emerson ams device managerSQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated...CVE-2015-10086.5 MediumMay 26, 2015
t1utils project t1utils, canonical ubuntu linux +1 moreBuffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote...CVE-2015-3905Fix available7.5 HighMay 26, 2015
barracuda web filterBarracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same...CVE-2015-09624.3 MediumMay 25, 2015
barracuda web filterBarracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509...CVE-2015-09614.3 MediumMay 25, 2015
ocf sxf common libraryStack-based buffer overflow in the Open CAD Format Council SXF common library before 3.30 allows...CVE-2015-29466.8 MediumMay 25, 2015
bomgar remote supportBomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via...CVE-2015-0935Public exploitEPSS 12.0%7.5 HighMay 25, 2015
emc document sciences xpressionSQL injection vulnerability in the xAdmin interface in EMC Document Sciences xPression 4.2 before...CVE-2015-05406.5 MediumMay 25, 2015
h-fj mt-phpincgimt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs,...CVE-2015-29457.5 HighMay 25, 2015
hp nonstop safeguard securityUnspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x...CVE-2015-21239.0 HighMay 25, 2015
hp network virtualizationHP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote...CVE-2015-21217.8 HighMay 25, 2015
hp access controlUnspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP...CVE-2015-21184.0 MediumMay 25, 2015
hp loadrunnerBuffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via...CVE-2015-2110EPSS 11.0%10.0 HighMay 25, 2015
hp sdn van controllerThe REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause...CVE-2015-21227.8 HighMay 25, 2015
hp sitescopeUnspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x...CVE-2015-21208.7 HighMay 25, 2015
ibm infosphere information serverThe Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote...CVE-2015-01805.5 MediumMay 25, 2015
ibm security siteprotector systemDirectory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1...CVE-2015-01715.5 MediumMay 25, 2015
ibm security siteprotector systemIBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1...CVE-2015-01702.1 LowMay 25, 2015
ibm security siteprotector systemIBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1...CVE-2015-01694.0 MediumMay 25, 2015
ibm security siteprotector systemCross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7,...CVE-2015-01683.5 LowMay 25, 2015
ibm security siteprotector systemSQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3...CVE-2015-01616.5 MediumMay 25, 2015
ibm security siteprotector systemIBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1...CVE-2015-01609.0 HighMay 25, 2015
ibm business process manager, websphere +1 moreCross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5...CVE-2015-01563.5 LowMay 25, 2015
ibm spss statisticsAn unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows...CVE-2015-01406.8 MediumMay 25, 2015
ibm tivoli storage manager fastbackBuffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6...CVE-2015-01207.5 HighMay 25, 2015
ibm license metric tool, tivoli asset discovery for distributed, endpoint manager family +2 moreCommon Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9;...CVE-2014-89275.0 MediumMay 25, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open