CVE List - 2015 / February
Showing 301 - 400 of 486 CVEs for February 2015 (Page 4 of 5)
CVE ID | Date | Title |
---|---|---|
CVE-2015-0519 | 2015-02-14 | The InputAccel Database (IADB) installation process in EMC Captiva Capture... |
CVE-2015-0875 | 2015-02-15 | The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android... |
CVE-2014-7883 | 2015-02-15 | HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables... |
CVE-2015-1574 | 2015-02-15 | The Google Email application 4.2.2.0200 for Android allows remote attackers... |
CVE-2014-0227 | 2015-02-16 | java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55,... |
CVE-2014-6113 | 2015-02-16 | Cross-site scripting (XSS) vulnerability in the Web Reports component in... |
CVE-2014-6137 | 2015-02-16 | Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in... |
CVE-2015-0609 | 2015-02-16 | Race condition in the Common Classification Engine (CCE) in the... |
CVE-2015-1474 | 2015-02-16 | Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in... |
CVE-2015-1608 | 2015-02-16 | Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does... |
CVE-2014-9375 | 2015-02-16 | Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision... |
CVE-2015-0260 | 2015-02-16 | RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users... |
CVE-2015-0268 | 2015-02-16 | The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running... |
CVE-2015-1434 | 2015-02-16 | Multiple SQL injection vulnerabilities in my little forum before 2.3.4... |
CVE-2015-1435 | 2015-02-16 | Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4... |
CVE-2015-1436 | 2015-02-16 | Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before... |
CVE-2015-1495 | 2015-02-16 | Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote... |
CVE-2015-1496 | 2015-02-16 | Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2)... |
CVE-2015-1497 | 2015-02-16 | radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1,... |
CVE-2015-1498 | 2015-02-16 | Persistent Systems Radia Client Automation does not properly restrict access... |
CVE-2015-1499 | 2015-02-16 | The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31... |
CVE-2015-1500 | 2015-02-16 | Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server... |
CVE-2015-1501 | 2015-02-16 | The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application... |
CVE-2015-1613 | 2015-02-16 | RhodeCode before 2.2.7 allows remote authenticated users to obtain API... |
CVE-2014-6102 | 2015-02-17 | IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before... |
CVE-2014-6194 | 2015-02-17 | Directory traversal vulnerability in an unspecified web form in IBM... |
CVE-2014-8023 | 2015-02-17 | Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when... |
CVE-2014-8757 | 2015-02-17 | LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to... |
CVE-2014-9466 | 2015-02-17 | Open-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36,... |
CVE-2015-0247 | 2015-02-17 | Heap-based buffer overflow in openfs.c in the libext2fs library in... |
CVE-2015-1494 | 2015-02-17 | The FancyBox for WordPress plugin before 3.0.3 for WordPress does... |
CVE-2015-1427 | 2015-02-17 | The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x... |
CVE-2015-1616 | 2015-02-17 | SQL injection vulnerability in the ePO extension in McAfee Data... |
CVE-2015-1617 | 2015-02-17 | Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee... |
CVE-2015-1618 | 2015-02-17 | The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe)... |
CVE-2015-1619 | 2015-02-17 | Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client... |
CVE-2015-1621 | 2015-02-17 | Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module... |
CVE-2015-0108 | 2015-02-18 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1... |
CVE-2015-0109 | 2015-02-18 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1... |
CVE-2015-0617 | 2015-02-18 | Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow... |
CVE-2015-0620 | 2015-02-18 | The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2)... |
CVE-2015-0621 | 2015-02-18 | Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers... |
CVE-2015-1355 | 2015-02-18 | Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses... |
CVE-2015-1356 | 2015-02-18 | Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 determines... |
CVE-2015-1358 | 2015-02-18 | The remote-management module in the (1) Multi Panels, (2) Comfort... |
CVE-2015-0622 | 2015-02-19 | The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless... |
CVE-2015-0623 | 2015-02-19 | Cross-site scripting (XSS) vulnerability in the Administrator report page on... |
CVE-2015-0626 | 2015-02-19 | The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows... |
CVE-2015-1197 | 2015-02-19 | cpio 2.11, when using the --no-absolute-filenames option, allows local users... |
CVE-2014-5286 | 2015-02-19 | The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy... |
CVE-2014-6147 | 2015-02-19 | IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0,... |
CVE-2015-1349 | 2015-02-19 | named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and... |
CVE-2014-5352 | 2015-02-19 | The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in... |
CVE-2014-6301 | 2015-02-19 | Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in... |
CVE-2014-6302 | 2015-02-19 | The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7... |
CVE-2014-6303 | 2015-02-19 | The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7... |
CVE-2014-6304 | 2015-02-19 | The Form Controls CSS file in PNMsoft Sequence Kinetics before... |
CVE-2014-9421 | 2015-02-19 | The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka... |
CVE-2014-9422 | 2015-02-19 | The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos... |
CVE-2014-9423 | 2015-02-19 | The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka... |
CVE-2012-6687 | 2015-02-19 | FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to... |
CVE-2014-1831 | 2015-02-19 | Phusion Passenger before 4.0.37 allows local users to write to... |
CVE-2014-1832 | 2015-02-19 | Phusion Passenger 4.0.37 allows local users to write to certain... |
CVE-2014-8165 | 2015-02-19 | scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which... |
CVE-2014-8690 | 2015-02-19 | Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4... |
CVE-2014-9465 | 2015-02-19 | senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess... |
CVE-2014-9468 | 2015-02-19 | Multiple cross-site scripting (XSS) vulnerabilities in InstantASP InstantForum.NET 4.1.3, 4.1.2,... |
CVE-2014-9679 | 2015-02-19 | Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS... |
CVE-2015-1515 | 2015-02-19 | The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows... |
CVE-2015-1585 | 2015-02-19 | Fat Free CRM before 0.13.6 allows remote attackers to conduct... |
CVE-2015-1587 | 2015-02-19 | Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8... |
CVE-2015-1592 | 2015-02-19 | Movable Type Pro, Open Source, and Advanced before 5.2.12 and... |
CVE-2015-1603 | 2015-02-19 | Multiple cross-site scripting (XSS) vulnerabilities in Adminsystems CMS before 4.0.2... |
CVE-2015-1604 | 2015-02-19 | Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before... |
CVE-2015-1614 | 2015-02-19 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Image Metadata... |
CVE-2015-1879 | 2015-02-19 | Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin... |
CVE-2014-3578 | 2015-02-19 | Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9... |
CVE-2015-0584 | 2015-02-20 | The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration... |
CVE-2015-0628 | 2015-02-20 | The proxy engine on Cisco Web Security Appliance (WSA) devices... |
CVE-2014-5355 | 2015-02-20 | MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that... |
CVE-2015-0878 | 2015-02-20 | Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote... |
CVE-2015-0879 | 2015-02-20 | CREAR AL-Mail32 before 1.13d allows remote attackers to cause a... |
CVE-2015-0880 | 2015-02-20 | Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers... |
CVE-2015-0881 | 2015-02-20 | CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers... |
CVE-2015-2033 | 2015-02-20 | Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows... |
CVE-2014-0005 | 2015-02-20 | PicketBox and JBossSX, as used in Red Hat JBoss Enterprise... |
CVE-2014-3682 | 2015-02-20 | XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in... |
CVE-2014-8114 | 2015-02-20 | The UberFire Framework 0.3.x does not properly restrict paths, which... |
CVE-2014-8115 | 2015-02-20 | The default authorization constrains in KIE Workbench 6.0.x allows remote... |
CVE-2015-0167 | 2015-02-20 | Cross-site scripting (XSS) vulnerability in textAngular-sanitize.js in textAngular before 1.3.7... |
CVE-2015-1517 | 2015-02-20 | SQL injection vulnerability in Piwigo before 2.7.4, when all filters... |
CVE-2015-2034 | 2015-02-20 | Cross-site scripting (XSS) vulnerability in the administrative backend in Piwigo... |
CVE-2015-2035 | 2015-02-20 | SQL injection vulnerability in the administrative backend in Piwigo before... |
CVE-2015-2039 | 2015-02-20 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live... |
CVE-2015-2040 | 2015-02-20 | Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka... |
CVE-2015-0331 | 2015-02-21 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x... |
CVE-2015-0618 | 2015-02-21 | Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System... |
CVE-2015-0624 | 2015-02-21 | The web framework in Cisco AsyncOS on Email Security Appliance... |
CVE-2015-0631 | 2015-02-21 | Race condition in the SSL implementation on Cisco Intrusion Prevention... |
CVE-2014-6184 | 2015-02-22 | Stack-based buffer overflow in dsmtca in the client in IBM... |