cve.nowby Sazabi

CVEs published June 15, 2015

67 CVEs were published on June 15, 2015: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 67
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 67
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 67

CVE-2015-3209Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with…UnratedJun 15, 2015
CVE-2015-4093Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script…UnratedJun 15, 2015
CVE-2015-4118SQL injection vulnerability in monitor/show_sys_state.php in ISPConfig before 3.0.5.4p7 allows remote authenticated users with monitor…UnratedJun 15, 2015
CVE-2015-4119Multiple cross-site request forgery (CSRF) vulnerabilities in ISPConfig before 3.0.5.4p7 allow remote attackers to hijack the…UnratedJun 15, 2015
CVE-2015-4141The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows…UnratedJun 15, 2015
CVE-2015-4142Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode…UnratedJun 15, 2015
CVE-2015-4143The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of…UnratedJun 15, 2015
CVE-2015-4144The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough…UnratedJun 15, 2015
CVE-2015-4145The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being…UnratedJun 15, 2015
CVE-2015-4146The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before…UnratedJun 15, 2015
CVE-2015-4152Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to…UnratedJun 15, 2015
CVE-2015-4163GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause…UnratedJun 15, 2015
CVE-2015-4164The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators…UnratedJun 15, 2015
CVE-2015-4559Cross-site scripting (XSS) vulnerability in the product deployment feature in the Java core web services in Intel McAfee ePolicy…UnratedJun 15, 2015
CVE-2015-4344The Services Basic Authentication module 7.x-1.x through 7.x-1.3 for Drupal allows remote attackers to bypass intended resource…UnratedJun 15, 2015
CVE-2015-4345The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches…UnratedJun 15, 2015
CVE-2015-4346Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule…UnratedJun 15, 2015
CVE-2015-4347Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web…UnratedJun 15, 2015
CVE-2015-4348SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts…UnratedJun 15, 2015
CVE-2015-4349Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the…UnratedJun 15, 2015
CVE-2015-4350Multiple cross-site request forgery (CSRF) vulnerabilities in the Spider Catalog module for Drupal allow remote attackers to hijack the…UnratedJun 15, 2015
CVE-2015-4351The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration"…UnratedJun 15, 2015
CVE-2015-4352Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the…UnratedJun 15, 2015
CVE-2015-4353Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the…UnratedJun 15, 2015
CVE-2015-4354Cross-site scripting (XSS) vulnerability in the Ubercart Webform Integration module before 6.x-1.8 and 7.x before 7.x-2.4 for Drupal…UnratedJun 15, 2015

Show all 67 entriesShow fewer entries