Skip to content
OpenAdvisories

Archive

10 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /10 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2015-1571

    The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and privat…

  • Unscored —
    CVE-2015-1570

    The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not…

  • Unscored —
    CVE-2015-1042

    The string_sanitize_url function in core/string_api.php in MantisBT 1.2.0a3 through 1.2.18 uses an incorrect regular ex…

  • Unscored —
    CVE-2015-1377

    The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified …

  • Unscored —
    CVE-2015-1169

    Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attac…

  • Unscored —
    CVE-2015-1569

    Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attack…

  • Unscored —
    CVE-2015-1031

    Multiple use-after-free vulnerabilities in Privoxy before 3.0.22 allow remote attackers to have unspecified impact via …

    privoxy Debian
  • Unscored —
    CVE-2015-1548

    mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP req…

    mini-httpd Debian
  • Unscored —
    CVE-2014-8733

    Cloudera Manager 5.2.0, 5.2.1, and 5.3.0 stores the LDAP bind password in plaintext in unspecified world-readable files…

  • Unscored —
    CVE-2015-1431

    Cross-site scripting (XSS) vulnerability in includes/startup.php in phpBB before 3.0.13 allows remote attackers to inje…

    phpbb3 Ubuntu
  • Unscored —
    CVE-2015-1559

    Multiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition…

  • Unscored —
    CVE-2015-1432

    The message_options function in includes/ucp/ucp_pm_options.php in phpBB before 3.0.13 does not properly validate the f…

    phpbb3 Ubuntu