Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
July

CVEs published in July 2015

683 vulnerabilities, 132 critical, 11 exploited.

Known exploitedIn KEVPublic exploitFix available

intelliants subrion cmsSQL injection vulnerability in Subrion CMS before 3.3.3 allows remote authenticated users to...CVE-2015-41296.5 MediumJuly 5, 2015
emc secure remote servicesEMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate...CVE-2015-05449.3 HighJuly 5, 2015
emc secure remote servicesEMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X...CVE-2015-05435.8 MediumJuly 5, 2015
open-emr openemrinterface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers...CVE-2015-44535.0 MediumJuly 5, 2015
namshi namshi\/joseNAMSHI | JOSE 5.0.0 and earlier allows remote attackers to bypass signature verification via...CVE-2015-29645.0 MediumJuly 5, 2015
haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 MediumJuly 5, 2015
mozilla firefox, firefox esr, oracle solaris +2 moreMozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not...CVE-2015-2741Fix available4.3 MediumJuly 5, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2733Fix available10.0 HighJuly 5, 2015
mozilla network security services, debian linux, novell suse linux enterprise desktop +4 more +6 moreMozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,...CVE-2015-2730Fix available4.3 MediumJuly 5, 2015
mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla...CVE-2015-2729Fix available5.0 MediumJuly 5, 2015
mozilla firefoxMozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote attackers to read arbitrary...CVE-2015-2727Fix available6.8 MediumJuly 5, 2015
mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow...CVE-2015-2726Fix available10.0 HighJuly 5, 2015
mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2725Fix available10.0 HighJuly 5, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2722Fix available10.0 HighJuly 5, 2015
emc documentum administrator, documentum web publisher, documentum webtop +2 more +4 moreUnrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31, 6.7SP2 before...CVE-2015-45246.5 MediumJuly 4, 2015
ibm tivoli federated identity managerMultiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager ...CVE-2015-19664.3 MediumJuly 4, 2015
emc documentum administrator, documentum web publisher, documentum webtop +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop 6.7SP1 before P31, 6...CVE-2015-05513.5 LowJuly 4, 2015
emc isilon onefsThe log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x...CVE-2015-45259.0 HighJuly 4, 2015
cisco unified communications domain managerPlatform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a...CVE-2015-41965.0 MediumJuly 4, 2015
emc documentum d2The D2DownloadService.getDownloadUrls service method in EMC Documentum D2 4.1 and 4.2 before 4.2...CVE-2015-05484.0 MediumJuly 4, 2015
emc documentum d2The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2...CVE-2015-05474.0 MediumJuly 4, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 morePDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...CVE-2015-2743Fix available7.5 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +1 more +3 moreUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...CVE-2015-2731Fix available10.0 HighJuly 4, 2015
mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreThe IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0...CVE-2015-2728Fix available7.5 HighJuly 4, 2015
mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 HighJuly 4, 2015
mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...CVE-2015-2721Fix available4.3 MediumJuly 4, 2015
cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote...CVE-2015-42396.1 MediumJuly 3, 2015
cisco nx-osThe CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99.3), and...CVE-2015-42374.6 MediumJuly 3, 2015
cisco nx-osCisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows...CVE-2015-42347.2 HighJuly 3, 2015
cisco nx-osCisco NX-OS 6.2(10) on Nexus and MDS 9000 devices allows local users to execute arbitrary OS...CVE-2015-42324.6 MediumJuly 3, 2015
cisco nx-osThe Python interpreter in Cisco NX-OS 6.2(8a) on Nexus 7000 devices allows local users to bypass...CVE-2015-42313.6 LowJuly 3, 2015
apple iphone osThe WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to...CVE-2015-37284.8 MediumJuly 3, 2015
apple iphone osThe Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute...CVE-2015-37264.6 MediumJuly 3, 2015
apple iphone osMobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs,...CVE-2015-37254.3 MediumJuly 3, 2015
apple iphone osCoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a...CVE-2015-37246.8 MediumJuly 3, 2015
apple iphone osCoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a...CVE-2015-37236.8 MediumJuly 3, 2015
apple iphone osApplication Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which...CVE-2015-37224.3 MediumJuly 3, 2015
apple iphone os, mac os x +1 moreThe kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS...CVE-2015-37214.3 MediumJuly 3, 2015
apple mac os xThe kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs,...CVE-2015-37204.3 MediumJuly 3, 2015
apple iphone os, mac os x +1 moreTrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote...CVE-2015-37196.8 MediumJuly 3, 2015
apple mac os xsystemstatsd in the System Stats subsystem in Apple OS X before 10.10.4 does not properly...CVE-2015-37186.8 MediumJuly 3, 2015
sqlite, apple iphone os, mac os x +2 moreMultiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4...CVE-2015-37177.5 HighJuly 3, 2015
apple mac os xSpotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a...CVE-2015-37164.4 MediumJuly 3, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open