Skip to content
OpenAdvisories

Archive

January 2015

Vulnerabilities first published in this month (UTC), newest first.

← December 2014 2015 / January February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High —
    CVE-2015-1369

    SQL Injection in sequelize

    SQL injection vulnerability in Sequelize before 2.0.0-rc7 for Node.js allows remote attackers to execute arbitrary SQL commands via the order parameter.

    sequelize npm
  • High 7.8
    CVE-2015-0310 Exploited EPSS 15%

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.43…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2015-0311 Exploited Public exploit EPSS 86%

    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 8.8
    CVE-2015-0973

    Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows…

    texlive-bin libpng1.6 Debian
  • High 7.5
    CVE-2015-0221

    Django DoS in django.views.static.serve

    The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2015-0222

    Django database denial-of-service with ModelMultipleChoiceField

    ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2014-9601

    Pillow denial of service via PNG bomb

    Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

    pillow pillow pillow Debian Ubuntu PyPI
  • High 7.8
    CVE-2015-0016 Exploited Public exploit EPSS 76%

    Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

    KEV May 25, 2022
  • High 8.0
    CVE-2014-100005 Exploited Public exploit EPSS 43%

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17…

    KEV May 16, 2024
  • High 8.8
    CVE-2014-9495 Public exploit

    Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when runnin…

    texlive-bin libpng1.6 Debian
  • High —
    CVE-2014-9509

    Typo3 Vulnerable to Cache Poisoning

    The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, when config.prefixLocalAnchors is set to all or cached, allows remote attackers to have an unspecified impact (possibly resource consumption…

    typo3/cms Packagist