CVEs published in September 2015
555 vulnerabilities, 81 critical, 2 exploited.
- emc atmosThe XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated...7.5 High
- gnu screenThe MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion...5.0 Medium
- google chromeGoogle Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after...4.3 Medium
- google chromeThe decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in...6.8 Medium
- google chromeDouble free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in...7.5 High
- google chrome, v8 +1 moreMultiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome...7.5 High
- webgroupmedia cerbCross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote...6.8 Medium
- mybbCross-site scripting (XSS) vulnerability in the quick edit function in xmlhttp.php in MyBB (aka...4.3 Medium
- polycom realpresence cloudaxis suiteCross-site scripting (XSS) vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0...3.5 Low
- xenThe xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not...2.1 Low
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, (4) mdare64_52.sys, and (5)...7.2 High
- fortinet forticlientThe Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute...7.2 High
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...7.2 High
- pacemaker\/corosync configuration system project configuration systemThe pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary...8.5 High
- pacemaker\/corosync configuration system project configuration systemRace condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames,...4.9 Medium
- fortinet forticlientThe (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in...2.1 Low
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...6.5 Medium
- spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 moreRace condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote...6.9 Medium
- google chromeThe RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime...4.3 Medium
- google chromeThe WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in...7.5 High
- google chromeThe UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before...5.0 Medium
- google chromeMultiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing...7.5 High
- gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 moreGNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic...5.0 Medium
- cisco 1000v, mds 9000, nx-os +1 more +3 moreThe ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4),...6.1 Medium
- cisco asr 1000 series softwareThe IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers...5.0 Medium
- cisco telepresence video communication server softwareA local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2...6.9 Medium
- medhabidotcom mdc private messageCross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress...3.5 Low
- gnu gnutls, canonical ubuntu linux +1 moreDouble free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers...7.5 High
- isc bind, apple mac os x server +1 morebuffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote...7.8 High
- powerdns authoritative, authoritative server, debian linux +2 moreThe DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3...7.5 High
- qemu, fedoraproject fedora, redhat openstack +2 moreBuffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU...7.2 High
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to...7.5 High
- google chromeThe FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader...5.0 Medium
- google chromeUse-after-free vulnerability in the shared-timer implementation in Blink, as used in Google...7.5 High
- google chromeUse-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in...7.5 High
- google chromeThe DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote...7.5 High
- google chromeThe NavigatorServiceWorker::serviceWorker function in modules/serviceworkers...5.0 Medium
- google chromeThe ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in...6.4 Medium
- widgets project widgetsCross-site scripting (XSS) vulnerability in the Widgets extension for MediaWiki allows remote...4.3 Medium
- quiz project quizThe Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex...5.0 Medium
- timedmediahandler project timedmediahandlerThe reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new...5.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the...4.3 Medium
- mediawikiGeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before...5.0 Medium
- semanticforms project semanticformsMultiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki...4.3 Medium
- semanticforms project semanticformsMultiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before...4.3 Medium
- mediawikiThe ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1...7.5 High
- mediawiki, canonical ubuntu linux +1 moreThe Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25...5.0 Medium
- ippusbxd project ippusbxdIPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to...7.5 High
- Show moreLoading…