CVEs published in July 2015
683 vulnerabilities, 132 critical, 11 exploited.
- apple quicktimeQT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary...6.8 Medium
- apple quicktime, mac os x +1 moreQT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other...6.8 Medium
- apple quicktime, mac os x +1 moreQT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other...6.8 Medium
- apple quicktime, mac os x +1 moreQT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other...6.8 Medium
- apple safariCross-site scripting (XSS) vulnerability in the PDF functionality in WebKit in Apple Safari...4.3 Medium
- xmlsoft libxml2, debian linux +1 moreThe htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive...9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux +1 morelibxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent...4.3 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreInteger overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...7.5 High
- apple pykerberospython-kerberos vulnerable to KDC spoofing attacks8.1 High
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity Expansion5.0 Medium
- ibm javaUnspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of...5.0 Medium
- zurmo crmCross-site scripting (XSS) vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to...3.5 Low
- cisco adaptive security appliance softwareThe SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2)...6.8 Medium
- cisco digital content managerCisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of...5.4 Medium
- thycotic secret serverCross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x,...3.5 Low
- cisco unified meetingplaceSQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not...7.8 High
- ntp, debian linux, fedoraproject fedora +2 morentpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users...5.3 Medium
- apple safari, iphone os, mac os x +2 moreWebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS...6.8 Medium
- apple safari, iphone os, mac os x +2 moreThe SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x...6.8 Medium
- apple safari, iphone os, mac os x +2 moreThe Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x...6.8 Medium
- get-simple getsimple cmsCross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6...4.3 Medium
- get-simple getsimple cmsMultiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote...4.3 Medium
- novius-os novius osOpen redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users...5.8 Medium
- novius-os novius osDirectory traversal vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to include...7.5 High
- libreswanlibreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart)...5.0 Medium
- opensuse, x.org x server, xorg-server +2 moreThe authentication setup in XWayland 1.16.x and 1.17.x before 1.17.2 starts the server in non...3.6 Low
- impresscmsImpressCMS Path Traversal to Arbitrary File Delete6.4 Medium
- nokia maps \& places project maps \& placesOpen redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for...5.8 Medium
- tornadoweb tornadoTornado XSRF cookie allows side-channel attack against TLS (BREACH attack)6.5 Medium
- ibm websphere mqMQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the...4.3 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before...2.1 Low
- ibm powervcIBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access...4.6 Medium