CVEs published in August 2015
618 vulnerabilities, 138 critical, 4 exploited.
- hp keyviewUnspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows...7.5 High
- polarssl, opensuse +1 moreMemory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory...7.8 High
- mantisbtCross-site scripting (XSS) vulnerability in the "set configuration" box in the Configuration...3.5 Low
- chaos tool suite project ctools, drupal, fedoraproject fedora +2 moreCross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the...4.3 Medium
- sap mobile platformXML external entity (XXE) vulnerability in the application import functionality in SAP Mobile...6.8 Medium
- sap afariaCross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP...4.3 Medium
- sap netweaverXML external entity (XXE) vulnerability in SAP NetWeaver Portal 7.4 allows remote attackers to...6.8 Medium
- drupalDrupal 6.x before 6.37 and 7.x before 7.39 allows remote attackers to obtain sensitive node...5.0 Medium
- drupalThe Form API in Drupal 6.x before 6.37 and 7.x before 7.39 does not properly validate the form...6.8 Medium
- drupalSQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x...7.5 High
- drupalCross-site scripting (XSS) vulnerability in the Autocomplete system in Drupal 6.x before 6.37 and...4.3 Medium
- apache activemq, fedoraproject fedora +1 moreImproper Input Validation in Apache ActiveMQ5.0 Medium
- redhat openshiftRed Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote...8.5 High
- f5 big-iq adc, big-iq cloud, big-ip access policy manager +9 more +11 moreMemory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...7.8 High
- redhat mod clusterCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 Medium
- apache activemqImproper Authentication in Apache WSS4J7.5 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and...10.0 High
- openbsd opensshsshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local...7.2 High
- openbsd opensshUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...6.9 Medium
- openbsd openssh, apple mac os x +1 moreThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...1.9 Low
- mobile devices c4 obd-ii dongle firmware, munic mobile devices (mdi) obd-ii dongles +1 more** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in...9.0 High
- mobile devices c4 obd-ii dongle firmware, munic mobile devices (mdi) obd-ii dongles +1 more** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in...9.0 High
- mobile devices c4 obd-ii dongle firmware, munic mobile devices (mdi) obd-ii dongles +1 more** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in...9.0 High
- actiontec ncs01 firmwareCross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before...6.8 Medium
- actiontec ncs01 firmwareActiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which...8.3 High
- trendmicro deep discovery inspectorTrend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software...5.5 Medium
- trendmicro deep discovery inspectorMultiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI)...4.3 Medium
- ibm integration bus, websphere message broker +1 moreIBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8...3.5 Low
- ibm tivoli storage fastback for microsoft exchange, tivoli storage flashcopy manager for microsoft exchange server, tivoli storage manager for mail data protection for microsoft exchange server +2 moreThe mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft...4.0 Medium
- ibm systems directorIBM Systems Director 5.2.x, 6.1.x, 6.2.0.x, 6.2.1.x, 6.3.0.0, 6.3.1.x, 6.3.2.x, 6.3.3.x, 6.3.5.0,...7.2 High
- ibm tivoli storage flashcopy manager, tivoli storage manager for databases data protection for microsoft sql server, tivoli storage manager for mail data protection for microsoft exchange server +2 moreIBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 5.5 before 5.5...2.1 Low
- ibm tivoli storage flashcopy manager, tivoli storage manager for databases data protection for microsoft sql server, tivoli storage manager for mail data protection for microsoft exchange server +2 moreIBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1...2.1 Low
- ibm dominoCross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web...4.3 Medium
- ibm dominoOpen redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0...5.8 Medium
- roundupMultiple cross-site scripting (XSS) vulnerabilities in Roundup6.1 Medium
- hp centralview credit risk control, centralview dealer performance audit, centralview fraud risk management +3 more +5 moreHP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4...6.0 Medium
- hp centralview credit risk control, centralview dealer performance audit, centralview fraud risk management +3 more +5 moreHP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4...6.0 Medium
- hp centralview credit risk control, centralview dealer performance audit, centralview fraud risk management +3 more +5 moreHP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4...9.0 High
- ibm websphere application serverIBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5...5.0 Medium
- hp operations manager iUnspecified vulnerability in HP Operations Manager i (OMi) 9.22, 9.23, 9.24, 9.25, 10.00, and 10...10.0 High
- hp operations manager iUnspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23,...4.4 Medium
- ibm websphere application server, websphere virtual enterprise +1 moreIBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5...5.0 Medium
- apache tapestryApache Tapestry Unsafe Object Storage7.8 High
- php kobo photo gallery cms freeCross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC...6.8 Medium
- php kobo photo gallery cms freeCross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery...4.3 Medium
- emc documentum d2Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2...3.5 Low
- iodata wn-g54\/r2 firmwareI-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote...5.0 Medium
- cisco wireless lan controller softwareThe Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices...5.0 Medium
- cisco asr 5000 series softwareCisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of...5.0 Medium
- cisco prime infrastructureCisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows...3.5 Low
- Show moreLoading…