Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
June

CVEs published in June 2015

472 vulnerabilities, 47 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco prime network control systemThe Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2...CVE-2015-07686.5 MediumJune 12, 2015
cisco application and content networking system softwareCross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS...CVE-2015-07744.3 MediumJune 12, 2015
cisco firesight system softwareCisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an...CVE-2015-07735.5 MediumJune 12, 2015
cisco iosThe IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500...CVE-2015-07716.3 MediumJune 12, 2015
cisco firesight system softwareMultiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1...CVE-2015-07374.3 MediumJune 12, 2015
libmspack project libmspackOff-by-one error in the READ_ENCINT macro in chmd.c in libmspack before 0.5 allows remote...CVE-2015-4472Fix available6.8 MediumJune 11, 2015
libmspack project libmspackOff-by-one error in the lzxd_decompress function in lzxd.c in libmspack before 0.5 allows remote...CVE-2015-4471Fix available4.3 MediumJune 11, 2015
libmspack project libmspackOff-by-one error in the inflate function in mszipd.c in libmspack before 0.5 allows remote...CVE-2015-4470Fix available4.3 MediumJune 11, 2015
libmspack project libmspackThe chmd_read_headers function in chmd.c in libmspack before 0.5 does not validate name lengths,...CVE-2015-4469Fix available4.3 MediumJune 11, 2015
libmspack project libmspackMultiple integer overflows in the search_chunk function in chmd.c in libmspack before 0.5 allow...CVE-2015-4468Fix available4.3 MediumJune 11, 2015
libmspack project libmspackThe chmd_init_decomp function in chmd.c in libmspack before 0.5 does not properly validate the...CVE-2015-4467Fix available4.3 MediumJune 11, 2015
libmspack project libmspackThe cabd_extract function in cabd.c in libmspack before 0.5 does not properly maintain...CVE-2014-9732Fix available4.3 MediumJune 11, 2015
zanematthew zm ajax login \& registerCross-site scripting (XSS) vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for...CVE-2015-4465Public exploit4.3 MediumJune 10, 2015
zanematthew zm ajax login \& registerDirectory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for...CVE-2015-4153Public exploitEPSS 13.3%5.0 MediumJune 10, 2015
wftpserver wing ftp serverMultiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow...CVE-2015-41086.8 MediumJune 10, 2015
coppermine-gallery coppermine photo galleryCoppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a...CVE-2015-39235.0 MediumJune 10, 2015
xclonerThe XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and...CVE-2014-8607Public exploit2.1 LowJune 10, 2015
xclonerDirectory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla!...CVE-2014-8606Public exploit4.0 MediumJune 10, 2015
xclonerThe XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with...CVE-2014-8605Public exploit5.0 MediumJune 10, 2015
xclonerThe XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in...CVE-2014-8604Public exploit5.0 MediumJune 10, 2015
xclonercloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows...CVE-2014-8603Public exploit6.5 MediumJune 10, 2015
magnifica webscripts anima galleryMultiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2...CVE-2015-44155.0 MediumJune 10, 2015
dolibarrDolibarr ERP and CRM contain Cross-site Scripting VulnerabilityCVE-2015-3935Fix available4.3 MediumJune 10, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X...CVE-2015-3105Public exploitFix availableEPSS 90.1%10.0 HighJune 10, 2015
adobe air, air sdk, flash player +2 more +4 moreInteger overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160...CVE-2015-3104Fix available10.0 HighJune 10, 2015
adobe air, air sdk, flash player +2 more +4 moreThe Flash broker in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160...CVE-2015-3101Fix available4.3 MediumJune 10, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18...CVE-2015-3097Fix availableEPSS 12.0%5.0 MediumJune 10, 2015
microsoft win32k, windows 7, windows 8 +7 more +9 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows...CVE-2015-2360In KEVEPSS 14.8%7.2 HighJune 10, 2015
microsoft exchange serverCross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server...CVE-2015-2359EPSS 11.1%4.3 MediumJune 10, 2015
microsoft exchange serverCross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange...CVE-2015-17716.8 MediumJune 10, 2015
microsoft officeMicrosoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a...CVE-2015-1770In KEVEPSS 35.0%8.8 HighJune 10, 2015
microsoft windows server 2003, windows 2003 server +1 morewin32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows...CVE-2015-17687.2 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2015-1766EPSS 15.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via...CVE-2015-1765EPSS 14.1%4.3 MediumJune 10, 2015
microsoft exchange serverThe web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote...CVE-2015-1764EPSS 13.5%4.3 MediumJune 10, 2015
microsoft office, office compatibility pack +1 moreMicrosoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1...CVE-2015-1760EPSS 16.3%9.3 HighJune 10, 2015
microsoft office compatibility packMicrosoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a...CVE-2015-1759EPSS 16.3%9.3 HighJune 10, 2015
microsoft windows 7, windows 8, windows rt +3 more +5 moreUntrusted search path vulnerability in the LoadLibrary function in the kernel in Microsoft...CVE-2015-17586.9 MediumJune 10, 2015
microsoft active directory federation servicesCross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD...CVE-2015-1757EPSS 11.0%4.3 MediumJune 10, 2015
microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreUse-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows...CVE-2015-1756EPSS 17.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...CVE-2015-1755EPSS 19.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial...CVE-2015-1754EPSS 15.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-1753EPSS 15.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...CVE-2015-1752EPSS 15.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...CVE-2015-1751EPSS 16.6%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-1750EPSS 22.5%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted...CVE-2015-1748EPSS 15.1%6.8 MediumJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...CVE-2015-1747EPSS 23.6%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2015-1745EPSS 23.6%9.3 HighJune 10, 2015
microsoft internet explorerMicrosoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or...CVE-2015-1744EPSS 15.5%9.3 HighJune 10, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open