CVE-2015-3459Les systèmes de perfusion Hospira LifeCare PCA utilisant des versions antérieures à la 7.0 sont affectés par un défaut d'authentification sur le module de communication TELNET. Un …
10.0 ÉLEVÉE
CVE-2015-3458The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 does not restrict the stream wrappe…
6.5 MOYENNE
CVE-2015-3457Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter.
5.0 MOYENNE
CVE-2015-1399PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1…
6.5 MOYENNE
CVE-2015-1398Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote authenticated users to include and execute …
6.5 MOYENNE
CVE-2015-1397SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 …
6.5 MOYENNE
CVE-2015-3448REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.
2.1 FAIBLE
CVE-2015-3447Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML …
4.3 MOYENNE
CVE-2015-3026Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a …
5.0 MOYENNE
CVE-2015-1322Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LT…
4.6 MOYENNE
CVE-2015-1321Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
6.8 MOYENNE
CVE-2015-0711The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service reload…
5.0 MOYENNE
CVE-2015-0710The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that ar…
6.1 MOYENNE
CVE-2015-0709Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS pack…
6.8 MOYENNE
CVE-2015-0708Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit me…
6.1 MOYENNE
CVE-2015-1151Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an iPad client.
5.0 MOYENNE
CVE-2015-1150The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sen…
5.0 MOYENNE
CVE-2015-3340Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo …
2.9 FAIBLE
CVE-2015-1863Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via craft…
5.8 MOYENNE
CVE-2015-1774The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execut…
6.8 MOYENNE
CVE-2015-2115Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1 before Patch 1, and 1.4 before Patch 1 allows remote authenticated users to obtain sen…
2.7 FAIBLE
CVE-2015-2117Les systèmes de gestion HP TippingPoint SMS et vSMS (versions 4.1 avant le correctif 3 et 4.2 avant le correctif 1) sont concernés. Un attaquant distant peut exécuter du code arbit…
7.5 ÉLEVÉE
CVE-2015-2116Les versions 7.x de HP Storage Data Protector (antérieures à la version 7.03 build 107) sont affectées par une faille qui permet à un utilisateur distant d'exécuter du code arbitra…
9.0 ÉLEVÉE
CVE-2015-1885IBM WebSphere Application Server (versions 7.0, 8.0, 8.5) est affecté lors de l'utilisation de types d'octroi OAuth nécessitant des mots de passe. Un attaquant distant non authenti…
9.3 ÉLEVÉE
CVE-2015-1882IBM WebSphere Application Server 8.5 Liberty Profile est affecté par des conditions de concurrence (race conditions) qui peuvent permettre à un utilisateur distant d'exécuter du co…
8.5 ÉLEVÉE
CVE-2015-0175IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges …
5.5 MOYENNE
CVE-2015-0174The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain …
4.0 MOYENNE
CVE-2015-2706Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of serv…
6.8 MOYENNE
CVE-2015-1908Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and …
4.3 MOYENNE
CVE-2015-1886Les installations d'IBM WebSphere Portal utilisant le service Remote Document Conversion Service sont vulnérables à une attaque par déni de service. Un attaquant non authentifié pe…
7.8 ÉLEVÉE
CVE-2015-0176Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script…
4.3 MOYENNE
CVE-2015-0113The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4…
5.0 MOYENNE
CVE-2014-6092IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service acc…
5.0 MOYENNE
CVE-2014-6090Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social…
6.8 MOYENNE
CVE-2015-3417Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have u…
6.8 MOYENNE
CVE-2015-3416Les versions de SQLite antérieures à 3.8.9 sont affectées lors de l'utilisation de la fonction `sqlite3VXPrintf` pour gérer les conversions de nombres à virgule flottante. Un attaq…
7.5 ÉLEVÉE
CVE-2015-3415Les bases de données SQLite version 3.8.8 et antérieures sont affectées par une faille dans la manière dont le système gère certains opérateurs de comparaison. Un attaquant distant…
7.5 ÉLEVÉE
CVE-2015-3414Les versions de SQLite antérieures à la 3.8.9 sont affectées si elles traitent des requêtes de base de données provenant d'une source externe. Un attaquant peut provoquer le planta…
7.5 ÉLEVÉE
CVE-2015-3310Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attacker…
4.3 MOYENNE
CVE-2015-3148cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
5.0 MOYENNE
CVE-2015-3145Les applications utilisant cURL ou libcurl (versions 7.31.0 à 7.41.0) sont affectées par une erreur de gestion de la mémoire lors du traitement de certains chemins de cookies. Un a…
7.5 ÉLEVÉE
CVE-2015-3144Les versions 7.37.0 à 7.41.0 de cURL et libcurl sont affectées par une erreur de gestion de la mémoire déclenchée par des noms d'hôte de longueur nulle. Un attaquant peut provoquer…
9.0 ÉLEVÉE
CVE-2015-3143cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar …
5.0 MOYENNE
CVE-2015-0846django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecifi…
5.0 MOYENNE
CVE-2015-0297Red Hat JBoss Operations Network 3.3.1 est affecté par une faille qui permet à un attaquant distant non authentifié d'exécuter des méthodes Java arbitraires ou de provoquer le plan…
9.0 ÉLEVÉE
CVE-2012-5451Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a denial of service (tvMobiliService service crash) via a long …
5.0 MOYENNE
CVE-2012-2932Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter …
4.3 MOYENNE
CVE-2012-2930Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests t…
6.8 MOYENNE
CVE-2011-4403Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a p…
5.8 MOYENNE
CVE-2015-0911Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling.
5.0 MOYENNE