2015

Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoA

Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hij

Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attack

The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protecti

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 an

Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site script

Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via crafted p

The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 an

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContain

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via

Microsoft Internet Explorer 8 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a tr

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by sending many SSL re

The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated users to bypass inten

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authentica

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended

Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrar

HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows re

The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows lo

Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of

vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial

The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADI

EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration file, which allows rem

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web scri

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitra

IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote au

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to

Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirr

Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitive

libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which

The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to c

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified imp

The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI upd

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server vi

The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a den

The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment vari

The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequireP

The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret direc

IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafte

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different

Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers

The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (

Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers t

The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to ca

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (