Skip to content
OpenAdvisories

Archive

4 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /4 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2015-1482 Public exploit

    Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive infor…

  • Unscored —
    CVE-2015-1481 Public exploit

    Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a …

  • Unscored —
    CVE-2014-9047

    Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remo…

  • Unscored —
    CVE-2014-9048

    The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass th…

  • Unscored —
    CVE-2014-9042

    Cross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application in ownCloud before 5.…

  • Unscored —
    CVE-2014-9043

    The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before…

  • Unscored —
    CVE-2014-9044

    Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS file…

  • Unscored —
    CVE-2014-9049

    The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to…

  • Unscored —
    CVE-2014-9562

    Cross-site scripting (XSS) vulnerability in display_dialog.php in M2 OptimalSite 0.1 and 2.4 allows remote attackers to…

  • Unscored —
    CVE-2014-9046

    The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows rem…

  • Unscored —
    CVE-2014-9041

    The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x befor…

  • Unscored —
    CVE-2014-9045

    The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypas…

  • Unscored —
    CVE-2014-5341

    The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after logi…

  • Unscored —
    CVE-2015-1475

    Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to in…

  • Unscored —
    CVE-2015-1437

    Multiple cross-site scripting (XSS) vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1.1.70 allow remote att…

  • Unscored —
    CVE-2015-1479 Public exploit

    SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 bui…

  • Unscored —
    CVE-2015-1476 Public exploit

    Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2015-1480 Public exploit

    ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ti…

  • Unscored —
    CVE-2015-1478 Public exploit

    Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote atta…

  • Unscored —
    CVE-2015-1477 Public exploit

    SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to exec…

  • Unscored —
    CVE-2014-7864 Public exploit EPSS 23%

    Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpMa…

  • Unscored —
    CVE-2014-9331 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote…