CVEs published in June 2015
472 vulnerabilities, 47 critical, 2 exploited.
- finder project finderOpen redirect vulnerability in the finder_form_goto function in the Finder module for Drupal...5.8 Medium
- tracking code project codeCross-site request forgery (CSRF) vulnerability in tracking_code.admin.inc in the Tracking Code...6.8 Medium
- registration codes project codesCross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6...6.8 Medium
- registration codes project codesCross-site request forgery (CSRF) vulnerability in the Registration codes module before 6.x-1.6,...6.8 Medium
- registration codes project codesMultiple cross-site scripting (XSS) vulnerabilities in the Registration codes module before 6.x-1...3.5 Low
- ubercart discount coupons project discount couponsCross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart...3.5 Low
- webform project webformCross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7...3.5 Low
- webform project webformCross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform...3.5 Low
- watchdog aggregator project aggregatorCross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal...6.8 Medium
- ubercart webform integration project webform integrationCross-site scripting (XSS) vulnerability in the Ubercart Webform Integration module before 6.x-1...3.5 Low
- osscube custom sitemapCross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows...5.8 Medium
- web-dorado spider video playerCross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal...5.8 Medium
- web-dorado spider video playerThe Spider Video Player module for Drupal allows remote authenticated users with the "access...4.9 Medium
- web-dorado spider catalogMultiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for...6.8 Medium
- spider contacts project contactsCross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows...5.8 Medium
- spider contacts project contactsSQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated...6.0 Medium
- inlinks project inlinksCross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows...4.3 Medium
- sms framework project frameworkCross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for...2.6 Low
- restful web services project web servicesThe RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x...5.0 Medium
- services basic authentication project basic authenticationThe Services Basic Authentication module 7.x-1.x through 7.x-1.3 for Drupal allows remote...5.0 Medium
- linux kernel, canonical ubuntu linux +1 moreThe overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in...7.8 High
- linux kernelThe tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a...5.5 Medium
- rle nova-wind turbine hmi firmwareRLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to...5.0 Medium
- sinapsi esolar light firmwareSinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover...2.1 Low
- n-tron 702w industrial wireless access pointN-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private...8.8 High
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreIgreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers...6.4 Medium
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreIgreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers...5.0 Medium
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreThe user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and...6.5 Medium
- adobe connectCross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote...4.3 Medium
- adobe connectCross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe...4.3 Medium
- actian matrixActian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users...6.5 Medium
- cgi rescue blobeeCGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and...7.5 High
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreCross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and...4.3 Medium
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreSQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and...7.5 High
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreIgreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers...7.5 High
- igreks milkystep light, milkystep professional, milkystep professional oem +2 moreCross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and...6.8 Medium
- vmware fusion, player, workstation +2 moreVMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x...7.8 High
- vmware horizon client, player, workstation +2 more +4 moreTPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...6.1 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...6.1 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...6.1 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...5.8 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...5.8 Medium
- cisco iosThe TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows...6.9 Medium
- cisco email security applianceThe anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022,...5.0 Medium
- ffmpeg, libav, canonical ubuntu linux +2 moreThe msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg...6.8 Medium
- cisco identity services engine softwareThe administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote...5.5 Medium
- cisco ios xrtelnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers...5.0 Medium
- cisco nexus 1000v, nx-os, mds 9000 nx-os +2 moreThe banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3...5.0 Medium
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a...7.1 High
- cisco ios xr softwareCisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to...7.8 High
- Show moreLoading…