CVEs published in August 2015
618 vulnerabilities, 138 critical, 4 exploited.
- cisco firesight system softwareThe web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete...6.4 Medium
- cisco webex node for mcsOpen redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote...5.8 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or...8.8 High
- netfilter conntrack-tools, debian linux +1 moreconntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules...5.0 Medium
- linux kernelThe vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows...2.1 Low
- zend frameworkZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.8 Medium
- arabportal arab portalSQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL...7.5 High
- phpliteadminMultiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to...4.3 Medium
- phpliteadmin project phpliteadminCross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to...6.8 Medium
- views bulk operations project bulk operationsThe Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the...4.9 Medium
- migrate project migrateCross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal,...2.6 Low
- niif shibboleth authenticationCross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6...2.1 Low
- me aliases project aliasesThe me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote...5.0 Medium
- hybridauth social login project social loginThe HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to...5.0 Medium
- content construction kit project construction kitOpen redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for...5.8 Medium
- administration views project viewsThe Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other...6.0 Medium
- the extensible catalog drupal toolkit project extensible catalog drupal toolkitCross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible...5.1 Medium
- inline entity form project entity formCross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6...4.3 Medium
- apache solr real-time project solr real-timeThe Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of...5.0 Medium
- codfront labs http strict transport securityThe HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1...6.8 Medium
- novalnet payment module ubercart-SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows...7.5 High
- chamilo integration project integrationOpen redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal...5.8 Medium
- storage api project apiThe Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to...7.5 High
- aegirproject hostmasterThe Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal...7.5 High
- navigate project navigateCross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote...3.5 Low
- navigate project navigateThe Navigate module for Drupal does not properly check permissions, which allows remote...4.0 Medium
- shipwire api project apiThe Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for...5.0 Medium
- web links project linksCross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1...3.5 Low
- pass2pdf project pass2pdfThe pass2pdf module for Drupal does not restrict access to generated PDF files, which allows...5.0 Medium
- mobile sliding menu project sliding menuCross-site scripting (XSS) vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1...2.1 Low
- webform matrix component project matrix componentCross-site scripting (XSS) vulnerability in the Webform Matrix Component module 7.x-4.x before 7...3.5 Low
- entityform block project blockThe Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions...5.0 Medium
- video consultation project consultationCross-site scripting (XSS) vulnerability in the Video Consultation module for Drupal allows...4.3 Medium
- dynamic display block project display blockThe Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated...3.5 Low
- views project viewsThe _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10...5.0 Medium
- smart trim project trimCross-site scripting (XSS) vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for...3.5 Low
- thinkshout mailchimpCross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp...2.1 Low
- techsmith camtasia relayCross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and...4.3 Medium
- dev4press gd bbpress attachmentsDirectory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress...4.0 Medium
- dev4press gd bbpress attachmentsCross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin...4.3 Medium
- devexpress ajax control toolkitDirectory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control...6.4 Medium
- pimcoreSQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute...7.5 High
- pimcoreDirectory traversal vulnerability in pimcore before build 3473 allows remote authenticated users...4.9 Medium
- cygnux syspassSQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated...6.5 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6...4.3 Medium
- splunkCross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4...4.3 Medium
- j2storeMultiple SQL injection vulnerabilities in the J2Store (com_j2store) extension before 3.1.7 for...7.5 High
- codelogic freichatSQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php...5.0 Medium
- netgate pfsenseCross-site scripting (XSS) vulnerability in pfSense before 2.2.3 allows remote attackers to...4.3 Medium
- netgate pfsenseMultiple cross-site scripting (XSS) vulnerabilities in pfSense before 2.2.3 allow remote...4.3 Medium
- Show moreLoading…