CVEs published in June 2015
472 vulnerabilities, 47 critical, 2 exploited.
- canonical ubuntu linuxThe simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04,...5.5 Medium
- developer log project logSQL injection vulnerability in the backend module in the Developer Log (devlog) extension before...6.5 Medium
- faq-frequenty asked questions project faq-frequently asked questionsSQL injection vulnerability in the "FAQ - Frequently Asked Questions" (js_faq) extension before 1...6.5 Medium
- smoelenboek project smoelenboekSQL injection vulnerability in the Smoelenboek (ncgov_smoelenboek) extension before 1.0.9 for...6.5 Medium
- store locator project locatorSQL injection vulnerability in the Store Locator (locator) extension before 3.3.1 for TYPO3...6.5 Medium
- wt directory project directorySQL injection vulnerability in the wt_directory extension before 1.4.2 for TYPO3 allows remote...6.5 Medium
- be user log project user logCross-site scripting (XSS) vulnerability in the BE User Log (beko_beuserlog) extension 1.1.1 and...3.5 Low
- frontend user upload project user uploadUnrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and...7.5 High
- job fair project fairUnrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3...7.5 High
- libmimedir project libmimedirlibmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes...7.5 High
- alcatel-lucent omniswitch firmwareCross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in...6.8 Medium
- alcatel-lucent omniswitch firmwareThe management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and...4.3 Medium
- mcafee epolicy orchestratorCross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web...4.3 Medium
- elastic logstashDirectory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4...6.4 Medium
- ispconfigMultiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow...6.8 Medium
- ispconfigSQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows...6.5 Medium
- elastic kibanaCross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote...4.3 Medium
- node template project templateCross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows...6.8 Medium
- keyword research project researchMultiple cross-site request forgery (CSRF) vulnerabilities in the Keyword Research module 6.x-1.x...5.1 Medium
- hybridauth social login project social loginThe HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in...3.5 Low
- services project servicesThe Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the...5.0 Medium
- services project servicesThe resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for...6.0 Medium
- display suite project suiteCross-site scripting (XSS) vulnerability in the Display Suite module 7.x-2.7 for Drupal allows...3.5 Low
- civicrm private reportCross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x...6.8 Medium
- user import project importMultiple cross-site request forgery (CSRF) vulnerabilities in the User Import module 6.x-4.x...6.8 Medium
- open graph importer project graph importerThe Open Graph Importer (og_tag_importer) 7.x-1.x for Drupal does not properly check the create...4.0 Medium
- current search links project search linksCross-site scripting (XSS) vulnerability in the Current Search Links module 7.x-1.x before 7.x-1...2.6 Low
- password policy project policyCross-site scripting (XSS) vulnerability in unspecified administration pages in the Password...2.6 Low
- entitybulkdelete project entitybulkdeleteMultiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages in the...4.3 Medium
- imagefield info project infoCross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield...2.1 Low
- ubercart webform checkout pane project webform checkout paneCross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x...3.5 Low
- decisions project decisionsCross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote...6.8 Medium
- invoice project invoiceMultiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6...6.8 Medium
- invoice project invoiceCross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x...3.5 Low
- linear case project caseCross-site scripting (XSS) vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for...3.5 Low
- webform multiple file upload project multiple file uploadCross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1...6.8 Medium
- crumbs project crumbsCross-site scripting (XSS) vulnerability in the Crumbs module 7.x-2.x before 7.x-2.3 for Drupal...2.1 Low
- petition project petitionCross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition...2.1 Low
- profile2 privacy project privacyCross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5...3.5 Low
- chaos tool suite project ctoolsThe Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to...4.3 Medium
- og tabs project tabsCross-site scripting (XSS) vulnerability in the OG tabs module before 7.x-1.1 for Drupal allows...3.5 Low
- image title project titleCross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for Drupal...3.5 Low
- perfecto project perfectoOpen redirect vulnerability in the Perfecto module before 7.x-1.2 for Drupal allows remote...5.8 Medium
- site documentation project documentationCross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for...3.5 Low
- trick question project questionCross-site scripting (XSS) vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x...3.5 Low
- commerce ogone project ogoneThe Commerce Ogone module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to complete...5.0 Medium
- simple subscription project subscriptionCross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1 and 7.x...3.5 Low
- mover project moverCross-site scripting (XSS) vulnerability in the Mover module 6.x-1.0 for Drupal allows remote...3.5 Low
- taxonomy accordion project accordionCross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows...3.5 Low
- campaign monitor project monitorMultiple cross-site request forgery (CSRF) vulnerabilities in includes/campaignmonitor_lists...6.8 Medium
- Show moreLoading…