Skip to content
OpenAdvisories

Archive

January 2015

Vulnerabilities first published in this month (UTC), newest first.

← December 2014 2015 / January February 2015 →
  1. 134
  2. 233
  3. 39
  4. 47
  5. 517
  6. 66
  7. 713
  8. 816
  9. 929
  10. 1017
  11. 11 
  12. 126
  13. 1394
  14. 1418
  15. 1538
  16. 1635
  17. 1714
  18. 183
  19. 19 
  20. 209
  21. 21164
  22. 2236
  23. 2311
  24. 24 
  25. 25 
  26. 2610
  27. 2728
  28. 289
  29. 2910
  30. 3047
  31. 31 
All Critical High Medium Low Exploited only Public exploit

713 results · Feed

  • Unscored —
    CVE-2015-0380

    Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5…

  • Unscored —
    CVE-2015-0403

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrit…

  • Unscored —
    CVE-2015-0402

    Unspecified vulnerability in the Siebel Core - Server BizLogic Script component in Oracle Siebel CRM 8.1.1 and 8.2.2 al…

  • Unscored —
    CVE-2015-0373

    Unspecified vulnerability in the OJVM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 1…

  • Unscored —
    CVE-2015-0386

    Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.…

  • Unscored —
    CVE-2015-0368

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, …

  • Unscored —
    CVE-2015-0390

    Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0…

  • Unscored —
    CVE-2015-0370

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.…

  • Unscored —
    CVE-2015-0391

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticate…

    mysql-5.6 Ubuntu
  • Unscored —
    CVE-2015-0375

    Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown…

  • Unscored —
    CVE-2015-0407

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0388

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authe…

  • Unscored —
    CVE-2015-0362

    Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7 a…

  • Unscored —
    CVE-2015-0371

    Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.…

  • Unscored —
    CVE-2015-0365

    Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 all…

  • Unscored —
    CVE-2015-0394

    Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.5…

  • Unscored —
    CVE-2015-0366

    Unspecified vulnerability in the Siebel Core - EAI component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attacke…

  • Unscored —
    CVE-2015-0369

    Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attac…

  • Unscored —
    CVE-2015-0389

    Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remot…

  • Unscored —
    CVE-2015-0395

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0406

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and …

  • Unscored —
    CVE-2015-0384

    Unspecified vulnerability in the Siebel Public Sector component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote auth…

  • Unscored —
    CVE-2015-0404

    Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, …

  • Unscored —
    CVE-2015-0399

    Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware …

  • Unscored —
    CVE-2015-0387

    Unspecified vulnerability in the Siebel Core - Server OM Services component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows…

  • Unscored —
    CVE-2015-1191

    Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1)…

    pigz pigz Debian Ubuntu
  • Unscored —
    CVE-2015-1038

    p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

    p7zip p7zip Debian Ubuntu
  • Unscored —
    CVE-2015-1193

    Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a…

    pax pax Debian Ubuntu
  • Unscored —
    CVE-2015-1196

    GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

    patch patch Debian Ubuntu
  • Unscored —
    CVE-2015-1194

    pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

    pax pax Debian Ubuntu
  • Unscored —
    CVE-2015-1192

    Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathn…

    kgb kgb Debian Ubuntu
  • Medium —
    CVE-2015-1195

    OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

    The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE…

    glance glance Debian PyPI
  • Unscored —
    CVE-2013-6892

    WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.

    websvn Ubuntu
  • Unscored —
    CVE-2014-6598 Public exploit

    Unspecified vulnerability in the Oracle Communications Diameter Signaling Router component in Oracle Communications App…

  • Unscored —
    CVE-2014-6600

    Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors relate…

  • Unscored —
    CVE-2014-6601

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6599

    Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows …

  • Medium 5.3
    CVE-2014-8152

    Improper Input Validation in Apache Santuario XML Security

    Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document.

    org.apache.santuario:xmlsec Maven
  • Unscored —
    CVE-2014-9621

    The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.

    file file Debian Ubuntu
  • Unscored —
    CVE-2014-9620

    The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of not…

    file file Debian Ubuntu