CVEs published in July 2015
683 vulnerabilities, 132 critical, 11 exploited.
- net-snmp The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the... 7.5 High
- cisco ios xe The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to... 5.0 Medium
- openafs, debian linux +1 more The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of... 4.0 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 more Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with... 6.8 Medium
- openafs The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing... 2.1 Low
- openafs pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted... 2.1 Low
- openafs OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors. 6.8 Medium
- openafs vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack... 4.3 Medium
- xmltooling project xmltooling XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not... 5.0 Medium
- dhcpcd project dhcpcd The print_option function in dhcp-common.c in dhcpcd through 6.9.1, as used in dhcp.c in dhcpcd 5... 6.8 Medium
- dhcpcd project dhcpcd The get_option function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before... 6.8 Medium
- cisco anyconnect secure mobility client The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local... 4.9 Medium
- cisco unified computing system central software The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read... 5.0 Medium
- webservice-dic yoyaku Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via... 7.5 High
- webservice-dic yoyaku Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a... 5.0 Medium
- webservice-dic yoyaku Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently... 7.5 High
- cisco content security management appliance, email security appliance, web security appliance +2 more The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security... 4.3 Medium
- cisco firepower extensible operating system Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote... 5.0 Medium
- lemon-s php gazou bbs plus LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents... 5.0 Medium
- cisco web security appliance, content security management virtual appliance, email security appliance firmware +2 more Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0... 4.3 Medium
- openbsd openssh The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly... 8.5 High
- freeradius, suse linux enterprise server, linux enterprise software development kit +2 more FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of... 7.5 High
- redhat ansible Ansible does not verify that the server hostname matches a domain name in certificates 4.3 Medium
- pivotal software spring framework, fedoraproject fedora +1 more Pivotal Spring Framework DoS Attack with XML Input 5.5 Medium
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 more IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before... 5.5 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 more named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to... 7.8 High
- wordpress, debian linux +1 more WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote... 4.0 Medium
- wordpress, debian linux +1 more Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated... 3.5 Low
- wesnoth battle for wesnoth, fedoraproject fedora +1 more The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in... 3.1 Low
- wesnoth battle for wesnoth, fedoraproject fedora +1 more The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in... 4.3 Medium
- linux kernel Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before... 4.9 Medium
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux hpc node eus +4 more +6 more The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local... 5.5 Medium
- rubyonrails rails, opensuse +1 more activesupport vulnerable to Denial of Service via large XML document depth 5.0 Medium
- rubyonrails rails, ruby on rails +1 more activesupport Cross-site Scripting vulnerability 4.3 Medium
- rubyonrails web console Web Console (Ruby gem) contains whitelisted_ips bypass 4.3 Medium
- rubyonrails jquery-rails, jquery-ujs, fedoraproject fedora +1 more +3 more jquery-rails and jquery-ujs subject to Exposure of Sensitive Information 5.0 Medium
- honeywell tuxedo touch Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA... 6.8 Medium
- honeywell tuxedo touch Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving... 5.0 Medium
- ibm maximo anywhere Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for... 5.0 Medium
- research-artisan research artisan lite Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows... 5.0 Medium
- research-artisan research artisan lite Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow... 4.3 Medium
- libuser project libuser, opensuse, redhat enterprise linux +2 more libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the... 7.2 High
- redhat libuser Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60... 2.1 Low
- welcart e-commerce Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for... 4.3 Medium
- cisco ios, ios xe +1 more The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY,... 7.1 High
- cisco unified meetingplace web conferencing The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and... 10.0 High
- cisco application policy infrastructure controller \(apic\), nx-os +1 more Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o)... 9.0 High
- artifex afpl ghostscript Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and... 6.8 Medium
- emc avamar server, avamar server virtual edition +1 more Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual... 7.8 High
- cisco ios xr The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1,... 5.0 Medium
- Show olderLoading…