CVEs published in July 2015
683 vulnerabilities, 132 critical, 11 exploited.
- microsoft windows server 2008, windows server 2012, windows 2003 server +2 moreThe Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and...3.3 Low
- microsoft windows 7, windows 8, windows server 2012 +2 moreThe Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and...10.0 High
- microsoft vbscriptvbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11...9.3 High
- microsoft windows 7, windows server 2008, windows vista +1 more +3 moreUntrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server...6.9 Medium
- microsoft windows 7, windows 8.1, windows rt 8.1 +2 more +4 moreUntrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1,...6.9 Medium
- microsoft windows 8, windows 8.1, windows server 2008 +1 more +3 moreHyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows...7.2 High
- microsoft windows 8.1, windows server 2012 +1 moreHyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS...7.2 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to read content from a different...4.3 Medium
- juniper junosThe BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12...9.3 High
- juniper junosJuniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47...7.1 High
- juniper junosJuniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47...7.1 High
- djangoproject djangoDjango ReDoS in validators.URLValidator7.8 High
- cisco firesight system softwareMultiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5...4.3 Medium
- cisco identity services engine softwareMultiple cross-site scripting (XSS) vulnerabilities in the Infra Admin UI in Cisco Identity...4.3 Medium
- juniper junosThe Juniper SRX Series services gateways with Junos OS 12.1X46 before 12.1X46-D35, 12.1X47 before...7.2 High
- ibm websphere application server, websphere virtual enterprise +1 moreIBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0...4.4 Medium
- ibm websphere application serverThe administrative console in IBM WebSphere Application Server (WAS) 8.0.0 before 8.0.0.11 and 8...6.0 Medium
- ibm websphere application serverThe default configuration of IBM WebSphere Application Server (WAS) 7.0.0 before 7.0.0.39, 8.0.0...6.8 Medium
- blackcat-cms blackcat cmsCross-site scripting (XSS) vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject...4.8 Medium
- orchardproject orchardCross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1...4.3 Medium
- wideimage project wideimageCross-site scripting (XSS) vulnerability in the applyConvolution demo in WideImage 11.02.19...4.3 Medium
- joomla joomla\!Cross-site request forgery (CSRF) vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3...6.8 Medium
- redcarpet project redcarpetredcarpet Buffer Overflow vulnerability7.5 High
- centreonCentreon Command Injection6.5 Medium
- centreonSQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in...7.5 High
- cisco unified communications managerMultiple cross-site scripting (XSS) vulnerabilities in the ccmivr page in Cisco Unified...4.3 Medium
- cisco unified communications managerThe Tomcat throttling feature in Cisco Unified Communications Manager 10.5(1.99995.9) allows...4.0 Medium
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF17 and 8...3.5 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in the Active Content Filtering component in IBM...4.3 Medium
- ibm websphere portalIBM WebSphere Portal 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF17, and 8.5.0 before CF06...5.0 Medium
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...9.8 Critical
- ibm business process managerThe REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3,...9.0 High
- libunwind project libunwindOff-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows...3.3 Low
- emc recoverpoint for virtual machinesEMC RecoverPoint for Virtual Machines (VMs) 4.2 allows local users to obtain root-shell access by...7.2 High
- cisco mobility services engineThe Control and Provisioning functionality in Cisco Mobility Services Engine (MSE) 10.0(0.1)...4.0 Medium
- cisco email security appliance, email security appliance firmware +1 moreCisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-074, and 9...4.3 Medium
- cisco telepresence advanced media gatewayCross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway...6.8 Medium
- vmware player, workstation, horizon view client +2 morevmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1,...7.2 High
- thoughtbot paperclippaperclip Cross-site Scripting vulnerability4.3 Medium
- cisco unified computing systemThe Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with...4.3 Medium
- lemon-s php simple oekakiindex.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete...6.4 Medium
- lemon-s php simple oekaki bbsCross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1...4.3 Medium
- cisco hosted collaboration solutionCross-site scripting (XSS) vulnerability in Cisco Hosted Collaboration Solution 10.6(1) allows...4.3 Medium
- cisco asr 5000 series softwareThe boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users...7.2 High
- cisco telepresence mse 8000 seriesCross-site request forgery (CSRF) vulnerability on Cisco TelePresence MSE 8000 devices allows...6.8 Medium
- cisco telepresence mcu softwareCross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with...6.8 Medium
- Show moreLoading…