cve.nowby Sazabi

CVEs published August 18, 2015

50 CVEs were published on August 18, 2015: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 50
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 50
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 50

CVE-2015-4425Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or…UnratedAug 18, 2015
CVE-2015-4426SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter…UnratedAug 18, 2015
CVE-2015-4670Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1…UnratedAug 18, 2015
CVE-2015-5481Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote…UnratedAug 18, 2015
CVE-2015-5482Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include…UnratedAug 18, 2015
CVE-2015-5487Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3 for Drupal allows…UnratedAug 18, 2015
CVE-2015-5488Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal…UnratedAug 18, 2015
CVE-2015-5489Cross-site scripting (XSS) vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with…UnratedAug 18, 2015
CVE-2015-5490The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache…UnratedAug 18, 2015
CVE-2015-5491The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access…UnratedAug 18, 2015
CVE-2015-5492Cross-site scripting (XSS) vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web…UnratedAug 18, 2015
CVE-2015-5493The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which…UnratedAug 18, 2015
CVE-2015-5494Cross-site scripting (XSS) vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allows remote…UnratedAug 18, 2015
CVE-2015-5495Cross-site scripting (XSS) vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated…UnratedAug 18, 2015
CVE-2015-5496The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via…UnratedAug 18, 2015
CVE-2015-5497Cross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows…UnratedAug 18, 2015
CVE-2015-5498The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview…UnratedAug 18, 2015
CVE-2015-5499The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and…UnratedAug 18, 2015
CVE-2015-5500Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to…UnratedAug 18, 2015
CVE-2015-5501The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote attackers to execute…UnratedAug 18, 2015
CVE-2015-5502The Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to Storage API fields attached to entities that…UnratedAug 18, 2015
CVE-2015-5503Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users…UnratedAug 18, 2015
CVE-2015-5504SQL injection vulnerability in the Novalnet Payment Module Ubercart module for Drupal allows remote attackers to execute arbitrary SQL…UnratedAug 18, 2015
CVE-2015-5505The HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly implement…UnratedAug 18, 2015
CVE-2015-5506The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows…UnratedAug 18, 2015

Show all 50 entriesShow fewer entries