cve.nowby Sazabi

CVEs published September 28, 2015

31 CVEs were published on September 28, 2015: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 31
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 31
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 31

CVE-2015-1781Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows…UnratedSep 28, 2015
CVE-2015-5185The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and 1.3.18 allows remote attackers to cause a denial of service (NULL…UnratedSep 28, 2015
CVE-2015-5400Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers…UnratedSep 28, 2015
CVE-2015-5957Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name.UnratedSep 28, 2015
CVE-2015-6806The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause…UnratedSep 28, 2015
CVE-2015-6927vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private…UnratedSep 28, 2015
CVE-2015-3203Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an…UnratedSep 28, 2015
CVE-2015-5279Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a…UnratedSep 28, 2015
CVE-2015-5372The SAML 2.0 implementation in AdNovum nevisAuth 4.13.0.0 before 4.18.3.1, when using SAML POST-Binding, does not match all attributes of…UnratedSep 28, 2015
CVE-2015-5375Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App…UnratedSep 28, 2015
CVE-2015-5703SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated…UnratedSep 28, 2015
CVE-2015-5082Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2)…UnratedSep 28, 2015
CVE-2015-6928classes/admin.class.php in CubeCart 5.2.12 through 5.2.16 and 6.x before 6.0.7 does not properly validate that a password reset request…UnratedSep 28, 2015
CVE-2015-7386Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for…UnratedSep 28, 2015
CVE-2015-7387ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute…UnratedSep 28, 2015
CVE-2014-9202Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.0_20150816 allow remote attackers to…UnratedSep 28, 2015
CVE-2015-3974EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation…UnratedSep 28, 2015
CVE-2015-6007Cross-site request forgery (CSRF) vulnerability in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to hijack…UnratedSep 28, 2015
CVE-2015-6008install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the…UnratedSep 28, 2015
CVE-2015-6009Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary…UnratedSep 28, 2015
CVE-2015-6010Multiple cross-site scripting (XSS) vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before…UnratedSep 28, 2015
CVE-2015-6011Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection…UnratedSep 28, 2015
CVE-2015-6012Multiple open redirect vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 and bleeding-edge before 2015-01-08 allow…UnratedSep 28, 2015
CVE-2015-6278The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE…UnratedSep 28, 2015
CVE-2015-6279The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE…UnratedSep 28, 2015

Show all 31 entriesShow fewer entries