CVEs published in June 2015
472 vulnerabilities, 47 critical, 2 exploited.
- ibm tivoli directory serverCross-site scripting (XSS) vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix...4.3 Medium
- ibm tivoli directory serverThe web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1...6.5 Medium
- ibm tivoli directory serverIBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44,...4.3 Medium
- ibm tivoli directory serverIBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44,...4.6 Medium
- limesurveySQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php...6.5 Medium
- ibm dominoCross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6...2.1 Low
- ibm infosphere information serverThe installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local...1.9 Low
- ibm business process manager, websphere +1 moreDirectory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8...4.0 Medium
- ibm websphere mq internet pass thruThe HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM...4.3 Medium
- siemens climatix bacnet\/ipCross-site scripting (XSS) vulnerability in the integrated web server on the Siemens Climatix...4.3 Medium
- icsgmbh pactwarePACTware 4.1 SP3 allows remote attackers to cause a denial of service (application crash) via a...4.3 Medium
- ibm security network protection firmwareCross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3...6.8 Medium
- cisco nx-osCisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000...4.0 Medium
- cisco iosRace condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing...7.1 High
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute...7.2 High
- cisco unified communications manager im and presence serviceSQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1...6.5 Medium
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict...4.0 Medium
- cisco email security virtual appliance, web security virtual appliance, content security management virtual appliance +2 moreThe remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual...4.3 Medium
- cisco email security virtual appliance, web security virtual appliance, content security management virtual appliance +2 moreThe remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual...5.0 Medium
- pcre, ibm powerkvm +1 moreHeap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38...9.1 Critical
- wvware libwmf, fedoraproject fedora, opensuse +2 moreHeap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers...6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups...7.5 High
- rack project rack, debian linux, opensuse +2 moreRack vulnerable to Denial of Service via large parameter depth request5.0 Medium
- google chromeThe DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before...4.3 Medium
- google chromebindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not...5.0 Medium
- google chromeBlink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation...5.0 Medium
- google chromecontent/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130...5.0 Medium
- wvware libwmf, fedoraproject fedora, opensuse +2 moreHeap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service...6.8 Medium
- cisco ios xrCisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via...5.0 Medium
- cisco unified presence serverCross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote...4.3 Medium
- sap mobile platformXML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read...7.5 High
- sap netweaverThe (1) Cross-System Tools and (2) Data Transfer Workbench in SAP NetWeaver have hardcoded...7.5 High
- metalgenix genixcmsMultiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote...4.3 Medium
- intelligent-it paypal currency converter basic for woocommerceAbsolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal...5.0 Medium
- mysql-lite-administrator project mysql-lite-administratorMultiple cross-site scripting (XSS) vulnerabilities in MySql Lite Administrator (mysql-lite...4.3 Medium
- silverstripeMultiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow...4.3 Medium
- silverstripeSilverstripe CMS Open Redirect5.8 Medium
- zohocorp manageengine assetexplorerCross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112...3.5 Low
- nextendweb facebook connectCross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook...4.3 Medium
- ruby-lang ruby, rubygems, oracle solaris +1 more +3 moreRubyGems vulnerable to DNS hijack attack5.0 Medium
- zohocorp manageengine assetexplorerCross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112...4.3 Medium
- cisco secure access control system, identity services engine software +1 moreCisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity...4.0 Medium
- cisco jabberThe web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows...5.0 Medium
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote...6.1 Medium
- cisco unified meetingplaceCisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) allows remote authenticated users to discover...4.0 Medium
- cisco nx-osCisco NX-OS 1.1(1g) on Nexus 9000 devices allows remote authenticated users to discover cleartext...4.0 Medium
- cisco webex meeting centerCisco WebEx Meeting Center allows remote attackers to obtain sensitive information via...5.0 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames,...7.2 High
- cisco webex meeting centerCisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which...7.5 High
- adobe bridge, photoshop cc +1 moreAdobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to...10.0 High
- Show moreLoading…