CVEs published in September 2015
555 vulnerabilities, 81 critical, 2 exploited.
- freebsd, apple iphone os, mac os x +2 moreThe __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS...6.9 Medium
- apple itunes, iphone os, safari +2 moreWebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote...6.8 Medium
- apple itunes, iphone os, safari +2 moreWebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute...6.8 Medium
- apple itunes, iphone os, safari +2 moreWebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute...6.8 Medium
- apple itunes, iphone os, safari +2 moreWebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute...6.8 Medium
- apple iphone os, safari +1 moreThe WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same...4.3 Medium
- wordpressThe mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to...6.1 Medium
- rpcbind project rpcbind, canonical ubuntu linux, debian linux +1 more +3 moreUse-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier...7.5 High
- cp reservation calender project reservation calenderMultiple SQL injection vulnerabilities in dex_reservations.php in the CP Reservation Calendar...7.5 High
- structured dynamics open semantic frameworkThe OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules...4.0 Medium
- structured dynamics open semantic frameworkCross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for...5.1 Medium
- structured dynamics open semantic frameworkCross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7...2.6 Low
- drupalcommerce commerce commonwealthThe Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly...5.0 Medium
- workbench email project emailThe Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users...3.5 Low
- twitter project twitterThe Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for...3.5 Low
- restful project restfulThe RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of...5.0 Medium
- fieldable panels panes project panels panesThe Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check...3.5 Low
- administration views project viewsThe Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based...5.0 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreCross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler...4.3 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreMultiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC)...10.0 High
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreDirectory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and...4.0 Medium
- teiko farolSQL injection vulnerability in the web application in Farol allows remote attackers to execute...7.5 High
- ganglia ganglia-web, fedoraproject fedora +1 moreganglia-web before 3.7.1 allows remote attackers to bypass authentication.9.8 Critical
- igniterealtime openfireMultiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2...6.8 Medium
- igniterealtime openfireMultiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow...4.3 Medium
- nokia \@vantage commanderMultiple cross-site scripting (XSS) vulnerabilities in Nokia Networks (formerly Nokia Solutions...4.3 Medium
- sis windows vga display managerSilicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display...7.2 High
- qlik qlikviewXML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote...6.4 Medium
- unit4 teta webUnit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 does not properly restrict access to...7.5 High
- checkmarx cxsastCheckmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the...9.0 High
- s9y serendipityCross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity...4.3 Medium
- s9y serendipityMultiple incomplete blacklist vulnerabilities in the serendipity_isActiveFile function in include...6.5 Medium
- nibbleblogUnrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows...6.5 Medium
- nibbleblogMultiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow...6.8 Medium
- creative-solutions contact form generatorMultiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2...6.8 Medium
- ciphercoin wp limit login attemptsMultiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in...7.5 High
- securemoz security auditThe tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and...6.8 Medium
- typo3TYPO3 cross-site scripting (XSS)3.5 Low
- hp universal configuration management databaseHP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10...4.9 Medium
- hp arcsight loggerHP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended...4.0 Medium
- hp loadrunnerUnspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain...4.6 Medium
- asus tm-1900Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute...9.3 High
- corel wordperfectHeap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect...6.8 Medium
- microfocus accurevMultiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev...9.3 High
- jsp\/mysql administrador web project administrador webCross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers...4.3 Medium
- jsp\/mysql administrador web project administrador webCross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote...6.8 Medium
- s9y serendipitySQL injection vulnerability in the serendipity_checkCommentToken function in include...6.0 Medium
- ibs mappro project mapproAbsolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for...7.8 High
- ibm http serverStack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0...9.0 High
- Show moreLoading…