CVEs published in September 2015
555 vulnerabilities, 81 critical, 2 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site,...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or...9.3 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute...9.3 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses,...6.4 Medium
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information...5.0 Medium
phpMageiaUpdated php packages fix security vulnerabilitiesNo scorepure-ftpdMageiaUpdated pure-ftpd packages fix security vulnerabilityNo scorepcreMageiaUpdated pcre packages fix security vulnerabilitiesNo score- xiph vorbis-toolsBuffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier...4.3 Medium
- kernel util-linuxThe mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers...9.8 Critical
- redhat openshift originDenial of Service in OpenShift Origin4.0 Medium
- redhat enterprise virtualizationThe Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users...3.7 Low
- jsoup, debian linux +1 moreImproper Neutralization of Input During Web Page Generation in Jsoup6.1 Medium
- squashfs project squashfs(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and...7.5 High
- squashfs project squashfs, fedoraproject fedora +1 moreInteger overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch...5.5 Medium
- freeimage project freeimageMultiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote...5.0 Medium
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...3.5 Low
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of...7.8 High
- openstack novaOpenStack Nova instance migration process does not stop when instance is deleted6.8 Medium
- oxide project oxide, canonical ubuntu linux +1 moreThe oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04...8.8 High
- opendocmanCross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to...4.3 Medium
- freebit elphonebtnv6 activex controlBuffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control...6.8 Medium
- lemon-s php twit bbsCross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote...4.3 Medium
- ffmpegThe ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles...7.5 High
- ffmpegThe allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize...7.5 High
- ffmpegThe destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly...7.5 High
- ffmpegThe ff_mpv_common_init function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not...7.5 High
- ffmpegMultiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in...7.5 High
- rakuto rktsns2Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote...4.3 Medium
- guide-park bbs x102Cross-site scripting (XSS) vulnerability in guide-park.com BBS X102 1.03 allows remote attackers...4.3 Medium
- cisco telepresence system software ixCisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under...5.0 Medium
- isc bind, apple mac os x server +1 moreopenpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows...7.1 High
- nscripter project nscripterBuffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via...6.8 Medium
- neojapan desknet neoDirectory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4...4.0 Medium
- ffmpeg, canonical ubuntu linux +1 moreThe ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not...7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize...7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a...7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce...7.5 High
- invisioncommunity invision power boardInvision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board)...7.8 High
- cyberoam cyberoamosSQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS...7.5 High
- invisionpower invision power boardCross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka...3.5 Low
- beditaMultiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers...4.3 Medium
- getlevelten spotlightCross-site scripting (XSS) vulnerability in the Spotlight module 7.x-1.x before 7.x-1.5 for...3.5 Low
- mass contact project contactCross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7...2.1 Low
- geddyjs geddyDirectory Traversal in geddy5.0 Medium
- octobercms octoberOctober CMS XSS In Caption Tag of Profile4.3 Medium
- netsweeperWebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote...9.4 High
- cisco integrated management controller supervisor, unified computing system director +1 moreThe JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor...9.4 High
- emc documentum content serverEMC Documentum Content Server before 7.1P20 and 7.2.x before 7.2P04 does not properly verify...9.0 High
- Show moreLoading…