Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
July

CVEs published in July 2015

683 vulnerabilities, 132 critical, 11 exploited.

Known exploitedIn KEVPublic exploitFix available

typo3-src Debiantypo3-sec - end of lifeDSA-3314-1No scoreJuly 23, 2015
linux kernel, redhat enterprise linux desktop, enterprise linux hpc node +3 more +5 morearch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET...CVE-2015-5157Fix available7.2 HighJuly 23, 2015
linux kernelarch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform does not...CVE-2015-3291Fix available2.1 LowJuly 23, 2015
linux kernelarch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform improperly...CVE-2015-3290Public exploitFix available7.2 HighJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 moreThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...CVE-2015-1288Fix available6.8 MediumJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 moreCross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function...CVE-2015-1286Fix available4.3 MediumJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 moreMultiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used...CVE-2015-1282Fix available6.8 MediumJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 moreInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...CVE-2015-1279Fix available7.5 HighJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 morecontent/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not...CVE-2015-1278Fix available4.3 MediumJuly 23, 2015
google chrome, opensuse +1 moreCross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in...CVE-2015-12754.3 MediumJuly 23, 2015
google chrome, debian linux, opensuse +3 more +5 moreGoogle Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous...CVE-2015-1274Fix available6.8 MediumJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 moreHeap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome...CVE-2015-1273Fix available6.8 MediumJuly 23, 2015
google chrome, debian linux, opensuse +4 more +6 morePDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of...CVE-2015-1271Fix available6.8 MediumJuly 23, 2015
cisco ios xrThe Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices...CVE-2015-42845.0 MediumJuly 22, 2015
cisco webex meetings serverCross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows...CVE-2015-42816.8 MediumJuly 22, 2015
linuxcontainers lxcattach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local...CVE-2015-1334Fix available4.6 MediumJuly 22, 2015
linuxcontainers lxclxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink...CVE-2015-1331Fix available4.9 MediumJuly 22, 2015
novell groupwiseMultiple cross-site scripting (XSS) vulnerabilities in WebAccess in Novell GroupWise 2012 before...CVE-2014-06114.3 MediumJuly 22, 2015
gemalto safenet luna g5, safenet luna pci-e, safenet luna sa +2 moreThe Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export...CVE-2015-54641.3 LowJuly 22, 2015
google chrome, opensuse +1 moreThe regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89,...CVE-2015-5605Fix available5.0 MediumJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to...CVE-2015-1289Fix available7.5 HighJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...CVE-2015-1287Fix available4.3 MediumJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreThe XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in...CVE-2015-1285Fix available5.0 MediumJuly 22, 2015
google chrome, opensuse, redhat enterprise linux desktop supplementary +2 more +4 moreThe LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google...CVE-2015-1284Fix available7.5 HighJuly 22, 2015
google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 MediumJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 morecore/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not...CVE-2015-1281Fix available4.3 MediumJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreSkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote...CVE-2015-1280Fix available7.5 HighJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0...CVE-2015-1277Fix available7.5 HighJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the...CVE-2015-1276Fix available9.8 CriticalJuly 22, 2015
google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403...CVE-2015-1272Fix available7.5 HighJuly 22, 2015
google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...CVE-2015-1270Fix available6.8 MediumJuly 22, 2015
tibco spotfire analyst, spotfire analytics platform for aws, spotfire automation services +6 more +8 moreMultiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in...CVE-2015-45547.5 HighJuly 21, 2015
hp system management homepageCross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5...CVE-2015-21346.0 MediumJuly 21, 2015
ibm business process managerCross-site scripting (XSS) vulnerability in the REST API in IBM Business Process Manager (BPM) 7...CVE-2015-19063.5 LowJuly 21, 2015
ibm business process managerThe REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3,...CVE-2015-19054.0 MediumJuly 21, 2015
fca uconnectUnspecified vulnerability in Uconnect before 15.26.1, as used in certain Fiat Chrysler...CVE-2015-56118.3 HighJuly 21, 2015
solarwinds n-able n-centralThe RSM (aka RSMWinService) service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the...CVE-2015-56104.0 MediumJuly 21, 2015
ghisler total commanderThe FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a...CVE-2015-28695.0 MediumJuly 21, 2015
cisco videoscape policy resource managerCisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows remote attackers to cause a denial of...CVE-2015-42837.8 HighJuly 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X...CVE-2015-5124Fix available10.0 HighJuly 20, 2015
cisco unified computing systemThe Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices...CVE-2015-42797.2 HighJuly 20, 2015
kaseya virtual system administratorOpen redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x...CVE-2015-2863Public exploitEPSS 10.2%4.3 MediumJuly 20, 2015
kaseya virtual system administratorDirectory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0...CVE-2015-2862Public exploit4.0 MediumJuly 20, 2015
apache http server, apple mac os x, mac os x server +2 more +4 moreThe read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not...CVE-2015-0253EPSS 12.8%5.0 MediumJuly 20, 2015
microsoft windows, windows 7, windows 8 +7 more +9 moreBuffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows...CVE-2015-2426In KEVPublic exploitEPSS 86.6%9.3 HighJuly 20, 2015
microsoft malicious software removal toolRace condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users...CVE-2015-24186.9 MediumJuly 20, 2015
blackberry linkmc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53...CVE-2015-41116.8 MediumJuly 20, 2015
ibm infosphere master data managementIBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4...CVE-2015-19844.0 MediumJuly 20, 2015
ibm infosphere master data managementIBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4...CVE-2015-19824.0 MediumJuly 20, 2015
ibm infosphere master data managementIBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4...CVE-2015-19803.5 LowJuly 20, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open