Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
September

CVEs published in September 2015

555 vulnerabilities, 81 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

ipython notebook, fedoraproject fedora, opensuse +2 moreImproper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2015-6938Fix available4.3 MediumSeptember 15, 2015
redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of...CVE-2015-5235Fix available4.3 MediumSeptember 15, 2015
redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which...CVE-2015-5234Fix available6.8 MediumSeptember 15, 2015
qemuHeap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0...CVE-2015-5279Fix available7.2 HighSeptember 15, 2015
qemu, arista eos, canonical ubuntu linux +1 more +3 moreThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...CVE-2015-5278Fix available6.5 MediumSeptember 15, 2015
ibm websphere commerceUnspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 through 7.0.0.9 allows remote...CVE-2015-49804.0 MediumSeptember 14, 2015
ibm websphere portalIBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7...CVE-2015-19437.8 HighSeptember 14, 2015
impero education proImpero Education Pro before 5105 relies on the -1|AUTHENTICATE\x02PASSWORD string for...CVE-2015-599810.0 HighSeptember 14, 2015
impero education proImpero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from...CVE-2015-59977.8 HighSeptember 14, 2015
cisco web security virtual applianceCisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service ...CVE-2015-62904.3 MediumSeptember 14, 2015
cisco content security management applianceCisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate...CVE-2015-62885.0 MediumSeptember 14, 2015
cisco web security virtual applianceCisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a...CVE-2015-62875.0 MediumSeptember 14, 2015
cisco application visibility and controlCisco Application Visibility and Control (AVC) 15.3(3)JA, when FlexConnect is enabled, allows...CVE-2015-62865.7 MediumSeptember 14, 2015
cisco email security applianceFormat string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote...CVE-2015-62856.4 MediumSeptember 14, 2015
mozilla bugzillaUtil.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x...CVE-2015-44997.5 HighSeptember 14, 2015
ibm websphere mqIBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service ...CVE-2015-20135.0 MediumSeptember 14, 2015
debian linux, linux kernel, canonical ubuntu linux +2 moreThe __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows...CVE-2015-6937Fix available4.9 MediumSeptember 14, 2015
freetype2 MageiaUpdated freetype2 packages fix security vulnerabilitiesMGASA-2015-0367Fix availableNo scoreSeptember 13, 2015
mariadb MageiaUpdated mariadb packages fix security vulnerabilitiesMGASA-2015-0362Fix availableNo scoreSeptember 13, 2015
phpmyadminphpMyAdmin ReCaptcha bypassCVE-2015-6830Public exploitFix availableEPSS 10.4%5.0 MediumSeptember 13, 2015
openvz vzctlvzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root...CVE-2015-6927Fix available3.6 LowSeptember 13, 2015
ntt-bp japan connected-free wi-fiCross-site scripting (XSS) vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi...CVE-2015-56304.3 MediumSeptember 11, 2015
ntt-bp japan connected-free wi-fiThe NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android...CVE-2015-56296.8 MediumSeptember 11, 2015
zendesk feedback tabCross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1...CVE-2015-69212.6 LowSeptember 11, 2015
sourceafrica project sourceafricaCross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for...CVE-2015-69204.3 MediumSeptember 11, 2015
googlesearch project googlesearchCross-site scripting (XSS) vulnerability in the googleSearch (CSE) (com_googlesearch_cse)...CVE-2015-69194.3 MediumSeptember 11, 2015
yahoo messengerMultiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote...CVE-2014-72169.3 HighSeptember 11, 2015
montala resourcespaceSQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote...CVE-2015-69157.5 HighSeptember 11, 2015
mindbite sitefactory cmsAbsolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read...CVE-2015-69147.8 HighSeptember 11, 2015
synology download stationCross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in...CVE-2015-69134.3 MediumSeptember 11, 2015
synology video stationSynology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell...CVE-2015-6912Public exploitEPSS 11.8%10.0 HighSeptember 11, 2015
synology video stationSQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to...CVE-2015-6911Public exploit7.5 HighSeptember 11, 2015
synology video stationSQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to...CVE-2015-69107.5 HighSeptember 11, 2015
synology download stationCross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in...CVE-2015-69094.3 MediumSeptember 11, 2015
siemens ruggedcom rugged operating systemSiemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which...CVE-2015-66754.3 MediumSeptember 11, 2015
moxa eds-405a firmware, eds-408a firmware +1 moreCross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web...CVE-2015-64664.3 MediumSeptember 11, 2015
moxa eds-405a firmware, eds-408a firmware +1 moreThe GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows...CVE-2015-64656.8 MediumSeptember 11, 2015
moxa eds-405a firmware, eds-408a firmware +1 moreThe administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6...CVE-2015-64648.5 HighSeptember 11, 2015
canon pixma mg7500 series inkjet printerCross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers...CVE-2015-56316.8 MediumSeptember 11, 2015
sma solar technology ag webbox firmwareSMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to...CVE-2015-396410.0 HighSeptember 11, 2015
advantech webaccessMultiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0...CVE-2014-9208Public exploit10.0 HighSeptember 11, 2015
auto-exchangerCross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers...CVE-2015-6827Public exploit6.8 MediumSeptember 11, 2015
sprymedia datatablesDataTable Vulnerable to Cross-Site ScriptingCVE-2015-6584Fix available4.3 MediumSeptember 11, 2015
openldap, apple mac os x +1 moreThe ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote...CVE-2015-6908Public exploitFix availableEPSS 18.8%5.0 MediumSeptember 11, 2015
qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 HighSeptember 11, 2015
freetype, canonical ubuntu linux, debian linux +1 more +3 moreThe parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to...CVE-2014-9745Fix available5.0 MediumSeptember 10, 2015
kernel-source SUSE, kernel-default SUSE, kernel-docs SUSE +5 more +7 moreSecurity update for kernel-sourceSUSE-SU-2015:1612-1Fix availableNo scoreSeptember 10, 2015
php, xmlsoft libxml2 +1 moreThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...CVE-2015-6838Fix available7.5 HighSeptember 9, 2015
php, xmlsoft libxml2 +1 moreThe xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5...CVE-2015-6837Fix available7.5 HighSeptember 9, 2015
phpThe SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5...CVE-2015-6836Fix availableEPSS 10.3%7.3 HighSeptember 9, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open