CVEs published in June 2015
472 vulnerabilities, 47 critical, 2 exploited.
- sysaidSysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which...7.5 High
- sybase adaptive server enterpriseSAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote...7.5 High
- novell zenworks configuration managementDirectory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management ...10.0 High
- novell zenworks configuration managementDirectory traversal vulnerability in UploadServlet in the Remote Management component in Novell...10.0 High
- novell zenworks configuration managementDirectory traversal vulnerability in UploadServlet in the Remote Management component in Novell...10.0 High
- hp webinspectUnspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote...4.0 Medium
- cisco telepresence tc softwareCRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on...5.0 Medium
- cisco edge 340 firmwareCisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root...7.2 High
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreJazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0...4.0 Medium
- ibm marketing operationsIBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4...4.0 Medium
- ibm marketing operationsDirectory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x...4.0 Medium
- ibm marketing operationsCross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2...3.5 Low
- linux kernel, canonical ubuntu linux +1 moreThe OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during...8.5 High
- linux kernelThe oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in...7.8 High
- linux kernel, canonical ubuntu linux, opensuse +2 moredrivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does...9.0 High
- linux kernelInteger signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in...9.0 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24,...7.5 High
- redislabs redis, debian linux +1 moreRedis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua...10.0 High
- xzeres 442sr osCross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows...6.8 Medium
- f21 jwtJWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via...5.0 Medium
- open explorer beta project explorer betaDirectory traversal vulnerability in the Brandon Bowles Open Explorer application before 0.254...6.4 Medium
- hp smart zero core, thinpro linux +1 moreUnspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero...7.2 High
- moxa softcmsStack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 (aka...6.8 Medium
- rsa web threat detectionCross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before 5.1 allows...6.8 Medium
- beckwithelectric m-2001d digital tapchanger control, m-6200 digital voltage regulator control, m-6200a digital voltage regulator control +9 more +11 moreBeckwith Electric M-6200 Digital Voltage Regulator Control with firmware before D-0198V04.07.00,...6.4 Medium
- cisco firesight system softwareMultiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the...4.3 Medium
- cisco ons 15454 system softwareCisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of...5.0 Medium
- cisco unified meetingplaceCisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted...5.0 Medium
- cisco unified meetingplaceCisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which...5.0 Medium
- cisco unified meetingplaceCross-site scripting (XSS) vulnerability in the management interface in Cisco Unified...4.3 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does...7.2 High
- cisco adaptive security appliance softwareThe IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13...4.0 Medium
- wpmembershipThe WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain...6.5 Medium
- apache camelApache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object5.0 Medium
- apache camelApache Camel XML External Entity vulnerability5.0 Medium
- xenThe compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which...4.9 Medium
- xenGNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version,...4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate...4.7 Medium
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...4.6 Medium
- xenXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows...4.9 Medium
- xenXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows...7.8 High
- xenXen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data...4.9 Medium
- linux kernel, google android +1 moreThe (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16...7.2 High
- paloaltonetworks pan-osXML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x...4.0 Medium
- sap afariaSAP Afaria does not properly restrict access to unspecified functionality, which allows remote...7.5 High
- sap ase database platformSQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute...7.5 High
- sap hana web-based development workbenchSQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers...7.5 High
- sap netweaver abap application server, netweaver java application server +1 moreSAP ABAP & Java Server allows remote attackers to cause a denial of service (service termination)...5.0 Medium
- sap content serverSAP Content Server allows remote attackers to cause a denial of service (service termination) via...5.0 Medium
- gnu parallel, opensuse +1 moreGNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows...3.6 Low
- Show moreLoading…