CVEs published in September 2015
555 vulnerabilities, 81 critical, 2 exploited.
- refbaseCross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0...6.8 Medium
- easyio easyio-30p-sf, easyio-30p-sf firmware +1 moreEasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in...9.0 High
- advantech webaccessMultiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8...6.9 Medium
- gnu glibcThe fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context...5.9 Medium
- gnu glibcInteger overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka...8.1 High
- gnu glibcThe process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23...5.5 Medium
pixmanMageiaUpdated pixman packages fix security vulnerabilitiesNo scoreunzipMageiaUpdated unzip packages fix security vulnerabilitiesNo scoresimplestreamsUbuntusimplestreams regressionNo score- indusoft web studioSchneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary...7.5 High
- indusoft web studioThe Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote...7.5 High
- ibc solar danfoss tlx pro\+, servemaster tlp\+ +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX...4.3 Medium
- ibc solar danfoss tlx pro\+, servemaster tlp\+ +1 moreIBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext...5.0 Medium
- resource data management data manager data managerResource Data Management Data Manager before 2.2 allows remote authenticated users to modify...5.5 Medium
- ibc solar danfoss tlx pro\+, servemaster tlp\+ +1 moreThe interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allows remote attackers to...5.0 Medium
- resource data management data manager data managerCross-site request forgery (CSRF) vulnerability in Resource Data Management Data Manager before 2...6.8 Medium
- everest peakhmiEverest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a...5.0 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before...7.2 High
- cisco anyconnect secure mobility clientUntrusted search path vulnerability in the CMainThread::launchDownloader function in...7.2 High
- cisco wireless lan controller softwareThe RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0)...5.0 Medium
- cisco ios xeCisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS...7.8 High
- emc rsa archer grcEMC RSA Archer GRC 5.x before 5.5.3 uses cleartext for stored passwords in unspecified...4.0 Medium
- emc rsa archer grcEMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access...6.5 Medium
- emc rsa archer grcMultiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer GRC 5.x before 5.5.3 allow...3.5 Low
- emc rsa identity management and governanceMultiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance ...3.5 Low
- emc rsa identity management and governanceMultiple cross-site scripting (XSS) vulnerabilities in EMC RSA Identity Management & Governance ...4.3 Medium
- nvidia display driver, gpu driver +1 moreThe NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304...6.9 Medium
unity-firefox-extensionUbuntu,webaccounts-browser-extensionUbuntu,webapps-greasemonkeyUbuntu +2 moreunity-firefox-extension, webapps-greasemonkey, webaccounts-browser-extension updateNo score- cisco telepresence server softwareCross-site request forgery (CSRF) vulnerability in Cisco TelePresence Server software 3.0(2.24)...6.8 Medium
- cisco sparkThe Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X...4.3 Medium
- mozilla firefoxMozilla Firefox before 41.0 does not properly restrict the availability of High Resolution Time...4.3 Medium
- mozilla firefoxThe VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla...7.5 High
- mozilla firefoxThe ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before...7.5 High
- mozilla firefoxupdater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows...6.6 Medium
- mozilla firefoxThe TCP Socket API implementation in Mozilla Firefox before 41.0 mishandles array boundaries that...5.0 Medium
- mozilla firefoxMozilla Firefox before 41.0 on Android allows user-assisted remote attackers to spoof address-bar...4.3 Medium
- linux kerneldrivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate...4.9 Medium
- apport project apport, canonical ubuntu linux +1 morekernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk...7.2 High
- simpestreams project simplestreams, canonical ubuntu linux +1 moreSimple Streams (simplestreams) does not properly verify the GPG signatures of disk image files,...6.8 Medium
- moodleMoodle cross-site scripting (XSS) vulnerability5.4 Medium
- moodleMoodle mishandles group-based authorization checks4.3 Medium
- moodleMoodle uses predictable password-recovery tokens7.5 High
- moodleMoodle allows attackers to obtain manager privileges6.8 Medium
- moodleMoodle allows attackers to delete files4.3 Medium
- moodleMoodle allows attackers to enter additional answer attempts5.4 Medium
- shutter-project shutterApp/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreMultiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap...4.4 Medium
- mozilla firefoxHeap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41...6.8 Medium
ubufoxUbuntuubufox updateNo score- mcafee enterprise security manager, enterprise security manager\/log manager, enterprise security manager\/receiver +2 moreMcAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and...6.5 Medium
- Show moreLoading…