CVEs published in September 2015
555 vulnerabilities, 81 critical, 2 exploited.
- drupaljedi amocrmCross-site scripting (XSS) vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal...2.6 Low
- avira management consoleUse-after-free vulnerability in the Update Manager service in Avira Management Console allows...10.0 High
- vboxcomm satellite express protocolThe ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to...7.2 High
- sumome google analyticatorMultiple cross-site scripting (XSS) vulnerabilities in the Google Analyticator plugin before 6.4...4.3 Medium
- atlassian hipchatThe HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to...6.5 Medium
- securifi almond-2015 firmware, almond firmware +1 moreSecurifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with...4.3 Medium
- philippine long distance telephone kasda kw58293 firmware, speedsurf 504an firmware +1 moreBuffer overflow in form2ping.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN...7.8 High
- philippine long distance telephone kasda kw58293 firmware, speedsurf 504an firmware +1 moreCross-site scripting (XSS) vulnerability in form2WlanSetup.cgi on Philippine Long Distance...4.3 Medium
- philippine long distance telephone kasda kw58293 firmware, speedsurf 504an firmware +1 moreCross-site request forgery (CSRF) vulnerability in form2WlanSetup.cgi on Philippine Long Distance...6.8 Medium
- securifi almond-2015 firmware, almond firmware +1 moreSecurifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with...4.3 Medium
- securifi almond-2015 firmware, almond firmware +1 moreCross-site request forgery (CSRF) vulnerability on Securifi Almond devices with firmware before...6.8 Medium
- securifi almond-2015 firmware, almond firmware +1 moreSecurifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with...7.3 High
- securifi almond-2015 firmware, almond firmware +1 moreSecurifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with...5.0 Medium
- retrospect, retrospect client +1 moreRetrospect and Retrospect Client before 10.0.2.119 on Windows, before 12.0.2.116 on OS X, and...5.0 Medium
- symantec web gatewayMultiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web...5.8 Medium
- symantec web gatewayThe management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0...8.3 High
- symantec web gatewayThe management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0...7.9 High
- symantec web gatewayadmin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with...7.9 High
- symantec web gatewayMultiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on...4.3 Medium
- symantec web gatewayThe management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0...8.5 High
- symantec deployment solution, ghost solutions suite +1 moreghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12...6.8 Medium
- symantec endpoint protectionMultiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in...6.5 Medium
- symantec endpoint protectionsysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows...4.9 Medium
- symantec endpoint protectionMultiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint...4.4 Medium
- newphoria corporation 1.1The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL...6.8 Medium
- newphoria corporation reversiThe Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows...6.8 Medium
- newphoria corporation koritoreThe Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers...6.8 Medium
- newphoria corporation megaphone musicThe Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows...6.8 Medium
- newphoria corporation auction cameraThe Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to...6.8 Medium
- newphoria corporation applicanThe runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12...6.8 Medium
- cisco asr 9001, asr 9006, asr 9010 +4 more +6 moreThe DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote...5.0 Medium
- cisco secure access control serverCisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15) allows remote authenticated...4.0 Medium
- cisco unity connectionSQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier...6.5 Medium
- cisco nx-osCisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to...4.8 Medium
- cisco telepresence server softwareBuffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence...7.8 High
- dena h20Directory traversal vulnerability in H2O before 1.4.5 and 1.5.x before 1.5.0-beta2, when the file...4.3 Medium
- cisco prime collaboration provisioningThe web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote...9.0 High
- cisco prime collaboration assuranceThe web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote...8.5 High
- cisco prime collaboration assuranceThe web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote...4.0 Medium
- cisco prime collaboration assuranceThe web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote...9.0 High
- linux kernelnet/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted...5.0 Medium
- vmware vcenter serverVMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS...5.8 Medium
- 3s-smart codesys gateway server, codesys 3s-smart codesys gateway server +1 moreMultiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.47 allow...7.5 High
- ge mds pulsenetAbsolute path traversal vulnerability in the download feature in FileDownloadServlet in GE...10.0 High
- ge mds pulsenetGE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded...9.0 High
- cisco ios xrThe DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote...5.0 Medium
- cisco prime network registrarCisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which...7.2 High
- cisco ios, ios xe +1 moreCisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a...6.1 Medium
- schneider-electric struxureware building expert multi-purpose managementSchneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the...5.0 Medium
- boxoft wav to mp3 converterBuffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of...7.5 High
- Show moreLoading…