CVEs published in September 2015

555 vulnerabilities, 81 critical, 2 exploited.

• linux kernel The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal... CVE-2015-4178 5.5 MediumSeptember 30, 2015
• linux kernel The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly... CVE-2015-4177 5.5 MediumSeptember 30, 2015
• linux kernel fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity,... CVE-2015-4176 5.5 MediumSeptember 30, 2015
• lxc Ubuntu lxc regression USN-2753-2 Fix available No scoreSeptember 30, 2015
• libemail-address-perl Debian libemail-address-perl - security update DLA-320-1 Fix available No scoreSeptember 30, 2015
• wordpress Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows... CVE-2015-7989 Fix available 5.4 MediumSeptember 30, 2015
• apache httpclient, canonical ubuntu linux, fedoraproject fedora +2 more Denial of service vulnerability in org.apache.httpcomponents:httpclient CVE-2015-5262 Fix available EPSS 18.8% 4.3 MediumSeptember 30, 2015
• splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6... CVE-2015-7604 4.3 MediumSeptember 29, 2015
• konicaminolta ftp utility Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to... CVE-2015-7603 Public exploit EPSS 60.7% 7.8 HighSeptember 29, 2015
• bisonware bisonftp Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read... CVE-2015-7602 Public exploit EPSS 61.5% 7.8 HighSeptember 29, 2015
• pcman ftp server Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read... CVE-2015-7601 Public exploit EPSS 58.6% 7.8 HighSeptember 29, 2015
• ipython notebook Improper Input Validation in Jupyter Notebook CVE-2015-7337 Fix available 6.8 MediumSeptember 29, 2015
• codepeople appointment booking calendar Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list... CVE-2015-7320 4.3 MediumSeptember 29, 2015
• codepeople appointment booking calendar SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the... CVE-2015-7319 7.5 HighSeptember 29, 2015
• x2engine x2crm Multiple cross-site scripting (XSS) vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote... CVE-2015-5076 4.3 MediumSeptember 29, 2015
• x2engine x2crm Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote... CVE-2015-5075 Public exploit 6.8 MediumSeptember 29, 2015
• x2engine x2crm Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters... CVE-2015-5074 Public exploit 7.5 HighSeptember 29, 2015
• open source point of sale project source point of sale Multiple cross-site scripting (XSS) vulnerabilities in Open Source Point of Sale 2.3.1 allow... CVE-2015-0299 4.0 MediumSeptember 29, 2015
• tibco managed file transfer command center, managed file transfer internet server, slingshot +1 more +3 more TIBCO Managed File Transfer Internet Server before 7.2.5, Managed File Transfer Command Center... CVE-2015-5711 4.0 MediumSeptember 29, 2015
• hp software update Unspecified vulnerability in HP Software Update before 5.005.002.002 allows local users to gain... CVE-2015-5442 4.6 MediumSeptember 29, 2015
• linuxcontainers lxc, canonical ubuntu linux +1 more lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to... CVE-2015-1335 Fix available 7.2 HighSeptember 29, 2015
• flightgear Debian flightgear - security update DLA-318-1 Fix available No scoreSeptember 29, 2015
• openssh Debian openssh - regression update DLA-288-2 Fix available No scoreSeptember 29, 2015
• hp integrated lights-out 3 firmware, integrated lights-out 4 firmware +1 more Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 3 before 1.85 and 4 before 2... CVE-2015-5435 4.0 MediumSeptember 29, 2015
• google chrome object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly... CVE-2015-1304 Fix available 7.5 HighSeptember 29, 2015
• google chrome bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not... CVE-2015-1303 Fix available 7.5 HighSeptember 29, 2015
• freetype, debian linux +1 more The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly... CVE-2014-9747 Fix available 7.5 HighSeptember 29, 2015
• freetype, debian linux +1 more The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in... CVE-2014-9746 Fix available 9.8 CriticalSeptember 29, 2015
• standards based linux instrumentation sblim-sfcb, opensuse +1 more The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote... CVE-2015-5185 Fix available 5.0 MediumSeptember 28, 2015
• open-xchange ox guard ox guard SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before... CVE-2015-5703 6.5 MediumSeptember 28, 2015
• open-xchange server, appsuite +1 more Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front... CVE-2015-5375 4.3 MediumSeptember 28, 2015
• adnovum nevisauth The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST... CVE-2015-5372 5.0 MediumSeptember 28, 2015
• h5ai project h5ai Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute... CVE-2015-3203 Public exploit 7.5 HighSeptember 28, 2015
• zohocorp manageengine eventlog analyzer ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to... CVE-2015-7387 Public exploit EPSS 80.2% 7.5 HighSeptember 28, 2015
• ghozylab gallery - photo albums - portfolio Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery -... CVE-2015-7386 3.5 LowSeptember 28, 2015
• cubecart classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly... CVE-2015-6928 6.8 MediumSeptember 28, 2015
• endian firewall firewall Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell... CVE-2015-5082 Public exploit EPSS 69.9% 10.0 HighSeptember 28, 2015
• refbase Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase)... CVE-2015-7383 4.3 MediumSeptember 28, 2015
• refbase SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6... CVE-2015-7382 Public exploit 7.5 HighSeptember 28, 2015
• refbase Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka... CVE-2015-7381 Public exploit 7.5 HighSeptember 28, 2015
• codewrights hart comm dtm CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote... CVE-2015-6463 5.8 MediumSeptember 28, 2015
• cisco firepower Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices with software 5.4.0.1 allow remote... CVE-2015-6307 6.1 MediumSeptember 28, 2015
• cisco ios, ios xe +1 more The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3... CVE-2015-6280 9.3 HighSeptember 28, 2015
• cisco ios, ios xe +1 more The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1... CVE-2015-6279 7.8 HighSeptember 28, 2015
• cisco ios, ios xe +1 more The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1... CVE-2015-6278 7.8 HighSeptember 28, 2015
• refbase Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and... CVE-2015-6012 5.8 MediumSeptember 28, 2015
• refbase Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows... CVE-2015-6011 5.0 MediumSeptember 28, 2015
• refbase Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase)... CVE-2015-6010 4.3 MediumSeptember 28, 2015
• refbase Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6... CVE-2015-6009 Public exploit 7.5 HighSeptember 28, 2015
• refbase install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to... CVE-2015-6008 Public exploit 7.5 HighSeptember 28, 2015
• Show olderLoading…