Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
June

CVEs published in June 2015

472 vulnerabilities, 47 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

cisco ios xrCisco IOS XR 5.2.1 allows remote attackers to cause a denial of service (ipv6_io service reload)...CVE-2015-41915.0 MediumJune 19, 2015
libclamunrar Debianlibclamunrar - security updateDLA-250-1Fix availableNo scoreJune 19, 2015
openstack icehouse, juno, kilo +1 more +3 moreOpenStack Cinder file disclosure in image convertCVE-2015-1851Fix available6.8 MediumJune 19, 2015
getsymphony symphonyCross-site scripting (XSS) vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject...CVE-2015-46614.3 MediumJune 18, 2015
eliacom enhanced sql portalCross-site scripting (XSS) vulnerability in Enhanced SQL Portal 5.0.7961 allows remote attackers...CVE-2015-46604.3 MediumJune 18, 2015
labsmedia clickheatCross-site request forgery (CSRF) vulnerability in ClickHeat 1.14 and earlier allows remote...CVE-2015-4659Public exploit6.8 MediumJune 18, 2015
milw0rm project clone scriptMultiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow...CVE-2015-4658Public exploit7.5 HighJune 18, 2015
mailbirdCross-site scripting (XSS) vulnerability in Mailbird 2.0.16.0 and earlier allows remote attackers...CVE-2015-46574.3 MediumJune 18, 2015
synology photo stationMultiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station before 6.3-2945...CVE-2015-46564.3 MediumJune 18, 2015
synology diskstation managerCross-site scripting (XSS) vulnerability in Synology DiskStation Manager (DSM) before 5.2-5565...CVE-2015-46554.3 MediumJune 18, 2015
joomla joomla\!SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote...CVE-2015-46547.5 HighJune 18, 2015
alcatel-lucent cellpipe 7130 router firmwareCross-site scripting (XSS) vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware...CVE-2015-45874.3 MediumJune 18, 2015
opsviewMultiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote...CVE-2015-4420Public exploit4.3 MediumJune 18, 2015
wp smiley project smileyCross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress...CVE-2015-41406.8 MediumJune 18, 2015
wp smiley project smileyCross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for...CVE-2015-41393.5 LowJune 18, 2015
bonitasoft bonita bpm portalDirectory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to...CVE-2015-3897Public exploitEPSS 17.6%5.0 MediumJune 18, 2015
searchbloxCross-site scripting (XSS) vulnerability in SearchBlox before 8.2.1 allows remote attackers to...CVE-2015-34224.3 MediumJune 18, 2015
limesurveySQL injection vulnerability in application/controllers/admin/questiongroups.php in LimeSurvey...CVE-2015-46286.5 MediumJune 18, 2015
vestacp vesta control panelCross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows...CVE-2015-28616.8 MediumJune 18, 2015
php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5...CVE-2015-46057.5 HighJune 18, 2015
drupal, debian linux +1 moreThe OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log...CVE-2015-32344.3 MediumJune 18, 2015
drupalOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote...CVE-2015-32335.8 MediumJune 18, 2015
drupal, debian linux +1 moreOpen redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote...CVE-2015-32325.8 MediumJune 18, 2015
drupal, debian linux +1 moreThe Render cache system in Drupal 7.x before 7.38, when used to cache content by user role,...CVE-2015-32314.0 MediumJune 18, 2015
cacti, fedoraproject fedora +1 moreSQL injection vulnerability in the get_hash_graph_template function in lib/functions.php in Cacti...CVE-2015-4454Fix available7.5 HighJune 17, 2015
se html5 album audio player project html5 album audio playerDirectory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se...CVE-2015-4414Public exploitEPSS 18.8%5.0 MediumJune 17, 2015
cacti, fedoraproject fedora +1 moreSQL injection vulnerability in Cacti before 0.8.8d allows remote attackers to execute arbitrary...CVE-2015-4342Fix available7.5 HighJune 17, 2015
xclonerStatic code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote...CVE-2015-43386.5 MediumJune 17, 2015
xclonerCross-site scripting (XSS) vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote...CVE-2015-43373.5 LowJune 17, 2015
xclonercloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users...CVE-2015-43366.5 MediumJune 17, 2015
automattic genericons, debian linux +1 moreCross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in...CVE-2015-3429Fix available4.3 MediumJune 17, 2015
akronymmanager project akronymmanagerSQL injection vulnerability in mod1/index.php in the Akronymmanager (sb_akronymmanager) extension...CVE-2015-2803Public exploit6.0 MediumJune 17, 2015
cacti, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in Cacti before 0.8.8d allows remote attackers to inject...CVE-2015-2665Fix available4.3 MediumJune 17, 2015
yoast wordpress seoCross-site scripting (XSS) vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast...CVE-2012-66924.3 MediumJune 17, 2015
cisco adaptive security appliance softwareThe Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with...CVE-2015-45504.3 MediumJune 17, 2015
cisco prime service catalogCisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows...CVE-2015-41904.3 MediumJune 17, 2015
cisco prime collaborationSQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows...CVE-2015-41885.0 MediumJune 17, 2015
cisco virtualization experience client 6000 series firmwareThe diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience ...CVE-2015-41867.2 HighJune 17, 2015
cisco unified computing systemCisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution...CVE-2015-41837.2 HighJune 17, 2015
ca client automation, network and systems management, nsm job management option +3 more +5 moreCA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and...CVE-2015-33184.6 MediumJune 17, 2015
ca client automation, network and systems management, nsm job management option +3 more +5 moreCA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and...CVE-2015-33174.6 MediumJune 17, 2015
broadcom network and systems management, ca client automation, nsm job management option +3 more +5 moreCA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and...CVE-2015-33164.6 MediumJune 17, 2015
emc unified infrastructure manager\/provisioningEMC Unified Infrastructure Manager/Provisioning (UIM/P) 4.1 allows remote attackers to bypass...CVE-2015-054610.0 HighJune 17, 2015
haxx curl, libcurl, hp system management homepage +2 more +4 moreThe smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB...CVE-2015-3237Fix available6.4 MediumJune 17, 2015
haxx curl, libcurl +1 morecURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a...CVE-2015-3236Fix available5.0 MediumJune 17, 2015
linux-2.6 Debianlinux-2.6 - security updateDLA-246-2Fix availableNo scoreJune 17, 2015
php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4...CVE-2015-46047.5 HighJune 17, 2015
debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 MediumJune 17, 2015
chaos tool suite project ctoolsOpen redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x...CVE-2015-43985.8 MediumJune 16, 2015
webform project webformCross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7...CVE-2015-43743.5 LowJune 16, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open