CVEs published in June 2015
472 vulnerabilities, 47 critical, 2 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted...5.1 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted...6.8 Medium
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- microsoft windows media playerMicrosoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreBuffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2,...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreUse-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreBuffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2,...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreUse-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreUse-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreUse-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2,...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreUse-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2,...2.1 Low
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or...9.3 High
- ektron content management systemMultiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron...3.5 Low
- usersultraMultiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5...7.5 High
- kankun smartsocketThe Kankun Smart Socket device and mobile application uses a hardcoded AES 256 bit key, which...6.8 Medium
- everybit encrypted contact formCross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1...6.8 Medium
- montala resourcespaceDirectory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2...7.5 High
- ektron content management systemCross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions...5.8 Medium
- zarafa collaboration platformprovider/server/ECServer.cpp in Zarafa Collaboration Platform (ZCP) before 7.1.13 and 7.2.x...6.6 Medium
- lighttpd, hp virtual customer access system, oracle solaris +2 moremod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a...7.5 High
- comodo geekbuddyComodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local...7.2 High
- zohocorp manageengine netflow analyzerZoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a...5.0 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5...7.5 High
- zohocorp manageengine netflow analyzerCross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier...6.8 Medium
- zohocorp manageengine netflow analyzerCross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows...4.3 Medium
- zohocorp manageengine netflow analyzerZoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization,...7.5 High
- cupsCross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the...4.3 Medium
- cupsThe add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free...10.0 High
- buffalotech bhr-4grv2 firmware, wex-300 firmware, whr-1166dhp firmware +4 more +6 moreThe Buffalo WHR-1166DHP 1.60 and earlier, WSR-600DHP 1.60 and earlier, WHR-600D 1.60 and earlier,...7.7 High
- ceph ceph-deployceph-deploy uses world-readable permissions on client.admin key2.1 Low
- beckhoff ipc diagnosticsBeckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config,...9.0 High
- redhat thermostatThermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which...2.1 Low
- sysaidSysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express...5.0 Medium
- sysaidSysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory...7.8 High
- sysaidMultiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote...6.5 Medium
- sysaidSysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote...5.0 Medium
- sysaidSysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an...5.0 Medium
- sysaidMultiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote...8.5 High
- sysaidThe RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions,...6.8 Medium
- sysaidUnrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows...6.5 Medium
- Show moreLoading…