CVEs published in July 2015
683 vulnerabilities, 132 critical, 11 exploited.
- ibm case managerMultiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1...3.5 Low
- ibm infosphere master data managementCross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Collaborative...3.5 Low
- ibm db2The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5,...8.0 High
- ibm db2The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5,...3.5 Low
- ibm db2IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX,...4.0 Medium
- ibm db2IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX,...6.8 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational quality manager +2 more +4 moreCross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational...3.5 Low
- eaton proview, eaton’s cooper power systems idea/ideaplus relays, series form 6 +2 moreEaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet7.6
- ibm db2IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX,...4.0 Medium
- phpStack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5...7.3 High
- phpThe phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5...9.8 Critical
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Medium
- apache http serverThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Medium
- mariadb, oracle mysql, debian linux +9 more +11 moreOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...5.9 Medium
- sysphonic thetisMultiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to...7.5 High
- seeds acmailerDirectory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta...5.5 Medium
freexlDebianfreexl - security updateNo scorecactiDebiancacti - regression updateNo score- cactiSQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to...7.5 High
- siemens siprotec firmwareA vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...7.8 High
- cisco adaptive security appliance softwareThe TLS implementation in the Cavium cryptographic-module firmware, as distributed with Cisco...4.3 Medium
- cisco prime collaborationCisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service ...5.0 Medium
- microfocus security solutions for iseriesMultiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject...6.8 Medium
- nvidia gpu driverThe NVIDIA GPU driver for FreeBSD R352 before 352.09, 346 before 346.72, R349 before 349.16, R343...7.2 High
- apache groovy, oracle health sciences clinical development center, retail order broker cloud service +3 more +5 moreImproper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy9.8 Critical
- fedoraproject fedora, gnu libidn, opensuse +2 moreThe stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context...7.5 High
- ruby-lang rubyThe URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to...7.5 High
- qemu, xen, fedoraproject fedora +4 more +6 moreHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...7.2 High
- emc documentum administrator, documentum web publisher, documentum webtop +2 more +4 moreOpen redirect vulnerability in EMC Documentum WebTop before 6.8P02, Documentum Administrator...5.8 Medium
- emc documentum centerstageCross-site scripting (XSS) vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows...3.5 Low
- cisco videoscape distribution suite for internet streaming, videoscape distribution suite service broker +1 moreCisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS...7.8 High
- boxautomation c2boxCross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement...6.8 Medium
- siemens sicam mic firmwareSiemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass...9.3 High
- cisco email security appliance firmwareCisco Email Security Appliance (ESA) devices with software 8.5.6-106 and 9.5.0-201 allow remote...4.3 Medium
- cisco webex meetings serverCisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code...6.5 Medium
- cisco asr 5000 series softwareThe Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0...5.0 Medium
- cisco unified intelligence centerCross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified...6.8 Medium
- cisco identity services engine softwareThe web interface in Cisco Identity Services Engine (ISE) 1.1(4.1), 1.3(106.146), and 1.3(120.135...4.3 Medium
- freereprintables articlefrMultiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6...6.8 Medium
- freereprintables articlefrMultiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow...4.3 Medium
- wpbeginner floating social barCross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar...4.3 Medium
- juniper junosThe SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44...5.0 Medium
- juniper junosIPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46...5.0 Medium
- juniper junosThe Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51...5.0 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreThe Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler...9.0 High
- f5 big-iq cloud, big-iq adc, big-iq device +1 more +3 moreThe REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0...4.3 Medium
- sap enterprise central componentUntrusted search path vulnerability in SAP Enterprise Central Component (ECC) allows local users...9.3 High
- sap afariaThe Windows client in SAP Afaria 7.0.6398.0 uses weak permissions (Everyone: read and Everyone:...7.2 High
- xenStack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows...6.8 Medium
- apache strutsIncomplete exclude pattern in Apache Struts7.5 High
- Show moreLoading…