CVEs published June 22, 2015
10 CVEs were published on June 22, 2015: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 10
- CVE-2015-3231The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain priv
- CVE-2015-3232Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web site
- CVE-2015-3233Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites
- CVE-2015-3234The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an O
- CVE-2015-3236cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_e
- CVE-2015-3237The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memo
- CVE-2015-4590The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service (cras
- CVE-2015-4713SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index
- CVE-2015-4714Cross-site scripting (XSS) vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode
- CVE-2015-0526Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Validation Manager (RVM) 3.2 before build 201 allow remote attackers to injec