Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
September

CVEs published in September 2015

555 vulnerabilities, 81 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

boltcms boltThe theme editor in Bolt before 2.2.5 does not check the file extension when renaming files,...CVE-2015-7309Public exploitEPSS 38.6%6.5 MediumSeptember 22, 2015
pentaho business analytics, data integration +1 moreThe GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x through...CVE-2015-69405.0 MediumSeptember 22, 2015
openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictionsCVE-2015-5251Fix available5.5 MediumSeptember 22, 2015
mozilla firefoxThe ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7180Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might...CVE-2015-7177Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses...CVE-2015-7176Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7175Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-7174Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x...CVE-2015-4522Fix available7.5 HighSeptember 22, 2015
mozilla firefoxThe ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3...CVE-2015-4521Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass...CVE-2015-4520Fix available6.4 MediumSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers...CVE-2015-4519Fix available4.3 MediumSeptember 22, 2015
mozilla firefoxNetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow...CVE-2015-4517Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0 allows remote attackers to bypass certain ECMAScript 5 (aka ES5) API...CVE-2015-4516Fix available9.3 HighSeptember 22, 2015
mozilla firefoxgfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux improperly attempts to use...CVE-2015-4512Fix available6.4 MediumSeptember 22, 2015
mozilla firefoxRace condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0...CVE-2015-4510Fix available6.8 MediumSeptember 22, 2015
mozilla firefoxUse-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and...CVE-2015-4509Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMozilla Firefox before 41.0, when reader mode is enabled, allows remote attackers to spoof the...CVE-2015-4508Fix available2.6 LowSeptember 22, 2015
mozilla firefoxThe SavedStacks class in the JavaScript implementation in Mozilla Firefox before 41.0, when the...CVE-2015-4507Fix available5.1 MediumSeptember 22, 2015
mozilla firefoxBuffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox...CVE-2015-4506Fix available6.8 MediumSeptember 22, 2015
mozilla firefoxThe lut_inverse_interp16 function in the QCMS library in Mozilla Firefox before 41.0 allows...CVE-2015-4504Fix available6.4 MediumSeptember 22, 2015
mozilla firefoxjs/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certain receiver arguments,...CVE-2015-4502Fix available4.3 MediumSeptember 22, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow...CVE-2015-4501Fix available7.5 HighSeptember 22, 2015
mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and...CVE-2015-4500Fix available7.5 HighSeptember 22, 2015
adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185...CVE-2015-6682Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-6679Fix available5.0 MediumSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreBuffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and...CVE-2015-6678Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-6677Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreBuffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and...CVE-2015-6676Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5588Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +1 more +3 moreStack-based buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on...CVE-2015-5587Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185...CVE-2015-5584Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5582Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185...CVE-2015-5581Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5580Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5579Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5578Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5577Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5576Fix available5.0 MediumSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5575Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185...CVE-2015-5574Public exploitFix availableEPSS 45.5%10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5573Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5572Fix available5.0 MediumSeptember 21, 2015
adobe air, air sdk, flash player +1 more +3 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5571Fix available4.3 MediumSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185...CVE-2015-5570Fix available10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5568Public exploitFix availableEPSS 19.9%10.0 HighSeptember 21, 2015
adobe air, air sdk, flash player +2 more +4 moreAdobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11...CVE-2015-5567Fix available10.0 HighSeptember 21, 2015
drupaldise cms updaterCross-site scripting (XSS) vulnerability in the CMS Updater module 7.x-1.x before 7.x-1.3 for...CVE-2015-73074.3 MediumSeptember 21, 2015
drupaldise cms updaterThe CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access...CVE-2015-73064.9 MediumSeptember 21, 2015
ows scaldThe Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields,...CVE-2015-73055.0 MediumSeptember 21, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open