CVEs published in July 2015
683 vulnerabilities, 132 critical, 11 exploited.
- pivotxCross-site scripting (XSS) vulnerability in the form method in modules/formclass.php in PivotX...4.3 Medium
- qualiteam x-cartCross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to...4.3 Medium
- nucleuscms nucleus cmsCross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject...4.3 Medium
- watchguard xcsWatchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute...6.5 Medium
- watchguard xcsSQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote...7.5 High
- shibboleth identity provider, opensaml java +1 moreImproper Certificate Validation in Shibboleth Identity Provider and OpenSAML4.3 Medium
- esri arcgis for desktop, arcgis for engine, arcgis server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Desktop, ArcGIS for Engine...4.3 Medium
- redhat jboss fuseRed Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions...6.0 Medium
- adobe flash player, opensuse evergreen, opensuse +8 more +10 moreUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in...9.8 Critical
- cisco ios xeThe PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote...6.1 Medium
- cisco firesight system softwareCross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6...6.8 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial...6.1 Medium
- cisco ip communicatorCisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage...5.0 Medium
- grandstream gxv3611 hd firmwareSQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9...7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Vulnerable to HTTP Response Splitting Attack4.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session store7.8 High
- antlabs inngate ig 3.01 e, inngate ig 3.10 e, inngate ig 3.10 m +3 more +5 moreCross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG...4.3 Medium
- antlabs inngate ig 3.01 e, inngate ig 3.10 e, inngate ig 3.10 m +3 more +5 moreSQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the path_openat function in fs/namei.c in the Linux kernel 3.x...4.6 Medium
linux-ftpd-sslDebianlinux-ftpd-ssl - security updateNo score- hospira lifecare pcainfusion firmwareHospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote...7.8 High
- hospira lifecare pca3, lifecare pca5, lifecare pcainfusion firmware +2 moreHospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has...4.6 Medium
- hospira lifecare pcainfusion firmwareStack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly...10.0 High
- hospira lifecare pcainfusion firmwareHospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier...5.0 Medium
- hospira lifecare pca infusion system, lifecare pcainfusion firmware +1 moreHospira LifeCare PCA Infusion System7.6
- rules link project linkCross-site scripting (XSS) vulnerability in the Rules Link module 7.x-1.x before 7.x-1.1 for...2.1 Low
- node field project fieldCross-site scripting (XSS) vulnerability in the Node Field module 7.x-2.x before 7.x-2.45 for...3.5 Low
- tournament project tournamentMultiple cross-site scripting (XSS) vulnerabilities in the Tournament module 7.x-1.x before 7.x-1...4.3 Medium
- language switcher dropdown project switcher dropdownOpen redirect vulnerability in the Language Switcher Dropdown module 7.x-1.x before 7.x-1.4 for...5.8 Medium
- theforeman foremanCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 Medium
- solarwinds storage managerThe AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload...10.0 High
- panasonic security api activex sdkStack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in...7.5 High
- panasonic security api activex sdkMultiple stack-based buffer overflows in Ipropsapi in Panasonic Security API (PS-API) ActiveX SDK...6.8 Medium
- cisco headend system releaseMemory leak in Cisco Headend System Release allows remote attackers to cause a denial of service ...7.8 High
- samsung galaxy s5The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung...7.9 High
- samsung s-beamSamsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to...3.3 Low
- hp hp-uxUnspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain...7.2 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 39.0 on OS X includes native key press information during the logging of...4.3 Medium
aptdaemonDebianaptdaemon - regression updateNo score- linux kernel, redhat enterprise linux server aus +1 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide...5.0 Medium
tidyMageiaUpdated tidy package fixes security vulnerabilityNo score- phpThe escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and...9.8 Critical
- polkit project polkit, fedoraproject fedora, opensuse +2 moreInteger overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) before...4.6 Medium
- owncloud desktop clientownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list...2.6 Low
- gnu coreutilsInteger overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23...9.8 Critical
- gnu coreutilsThe keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms...7.8 High
- polkit project polkit, opensuse +1 morePolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory...4.6 Medium
- polkit project polkitThe polkit_backend_action_pool_init function in polkitbackend/polkitbackendactionpool.c in...4.6 Medium
- linux-pam, oracle sparc-opl service processor +1 moreThe _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1,...6.5 Medium
- polkit project polkitThe authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in...2.1 Low
- Show moreLoading…