CVE-2015-4296Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java process restart) via crafted connections to…
5.0 MOYENNE
CVE-2015-4277The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local user…
4.9 MOYENNE
CVE-2015-6523Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for request…
6.8 MOYENNE
CVE-2015-6522Les sites WordPress utilisant l'extension WP Symposium (versions antérieures à 15.8) sont vulnérables à une faille d'injection SQL dans le fichier `get_album_item.php`. Un attaquan…
7.5 ÉLEVÉE
CVE-2015-6255Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted cha…
4.3 MOYENNE
CVE-2015-5621Les versions 5.7.2 et antérieures de Net-SNMP sont affectées par une erreur de gestion de la mémoire lors de l'analyse de paquets spécialement conçus. Un attaquant distant non auth…
7.5 ÉLEVÉE
CVE-2015-5163The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a c…
3.5 FAIBLE
CVE-2015-4324Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)E1(1c), Nexus 7000 devices 7.2(…
6.1 MOYENNE
CVE-2015-4322Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote au…
5.5 MOYENNE
CVE-2015-4308The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to obtain sensitive information via unspec…
6.8 MOYENNE
CVE-2015-4301Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that are copied to a device's filesystem, ak…
6.8 MOYENNE
CVE-2015-4299Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders …
5.5 MOYENNE
CVE-2015-4298Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via u…
6.5 MOYENNE
CVE-2015-1830Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for Windows allows remote attackers to crea…
5.0 MOYENNE
CVE-2015-4302The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system policies via modified parameters in a POST request, aka Bug ID CSC…
6.4 MOYENNE
CVE-2015-4297Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…
5.8 MOYENNE
CVE-2015-2502Les versions 7 à 11 de Microsoft Internet Explorer sont affectées par une faille de corruption de mémoire. Un attaquant peut exécuter du code arbitraire ou faire planter le navigat…
KEV
8.8 ÉLEVÉE
CVE-2015-6519Les installations d'Arab Portal 3 sont vulnérables à une faille d'injection SQL lors du processus d'inscription. Un attaquant distant non authentifié peut envoyer des requêtes spéc…
7.5 ÉLEVÉE
CVE-2015-6518Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) droptable parameter…
4.3 MOYENNE
CVE-2015-6517Cross-site request forgery (CSRF) vulnerability in phpLiteAdmin 1.1 allows remote attackers to hijack the authentication of users for requests that drop database tables via the dro…
6.8 MOYENNE
CVE-2015-5515The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to ed…
4.9 MOYENNE
CVE-2015-5514Cross-site scripting (XSS) vulnerability in the Migrate module 7.x-2.x before 7.x-2.8 for Drupal, when the migrate_ui submodule is enabled, allows user-assisted remote attackers to…
2.6 FAIBLE
CVE-2015-5513Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with…
2.1 FAIBLE
CVE-2015-5512The me aliases module 6.x-2.x before 6.x-2.10 and 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to access Views using the "me" user argument handler by substituting "me…
5.0 MOYENNE
CVE-2015-5511The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an acco…
5.0 MOYENNE
CVE-2015-5510Open redirect vulnerability in the Content Construction Kit (CCK) 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct ph…
5.8 MOYENNE
CVE-2015-5509The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows re…
6.0 MOYENNE
CVE-2015-5508Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers to hijack the authentication of…
5.1 MOYENNE
CVE-2015-5507Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fiel…
4.3 MOYENNE
CVE-2015-5506The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about u…
5.0 MOYENNE
CVE-2015-5505The HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the "include subdomains" directive, which …
6.8 MOYENNE
CVE-2015-5504Les sites Drupal utilisant le module de paiement Novalnet pour Ubercart sont vulnérables aux injections SQL. Un attaquant distant non authentifié peut envoyer des requêtes réseau s…
7.5 ÉLEVÉE
CVE-2015-5503Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishin…
5.8 MOYENNE
CVE-2015-5502Les sites Drupal utilisant le module Storage API (versions antérieures à 7.x-1.8) sont affectés par une faille de contrôle d'accès. Un attaquant distant non authentifié peut exploi…
7.5 ÉLEVÉE
CVE-2015-5501Les installations Drupal utilisant le module Hostmaster (Aegir) dans un environnement multi-site sont concernées. Un attaquant distant et non authentifié peut exécuter du code PHP …
7.5 ÉLEVÉE
CVE-2015-5500Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via uns…
3.5 FAIBLE
CVE-2015-5499The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveragin…
4.0 MOYENNE
CVE-2015-5498The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview (admin/shipwire/shipments), which allows remote attackers t…
5.0 MOYENNE
CVE-2015-5497Cross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with certain permiss…
3.5 FAIBLE
CVE-2015-5496The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors.
5.0 MOYENNE
CVE-2015-5495Cross-site scripting (XSS) vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer menu" permission…
2.1 FAIBLE
CVE-2015-5494Cross-site scripting (XSS) vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allows remote authenticated users with certain permissions to inj…
3.5 FAIBLE
CVE-2015-5493The Entityform Block module 7.x-1.x before 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which allows remote attackers to obtain access to…
5.0 MOYENNE
CVE-2015-5492Cross-site scripting (XSS) vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3 MOYENNE
CVE-2015-5491The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging …
3.5 FAIBLE
CVE-2015-5490The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which a…
5.0 MOYENNE
CVE-2015-5489Cross-site scripting (XSS) vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary w…
3.5 FAIBLE
CVE-2015-5488Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "adm…
2.1 FAIBLE
CVE-2015-5487Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3 for Drupal allows remote authenticated users with the "view …
4.3 MOYENNE
CVE-2015-5482Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a .. (…
4.0 MOYENNE