Skip to content
OpenAdvisories

Archive

12 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /12 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Medium —
    CVE-2015-0227

    Improper Access Control in Apache WSS4J

    Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

    wss4j org.apache.ws.security:wss4j wss4j:wss4j Debian Maven
  • Unscored —
    CVE-2015-1546

    Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attac…

    openldap Debian
  • Unscored —
    CVE-2015-1545 EPSS 11%

    The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attacker…

    openldap openldap Debian Ubuntu
  • Unscored —
    CVE-2015-1345

    The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-…

    grep Debian
  • Unscored —
    CVE-2015-1471 Public exploit

    SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL …

  • Medium —
    CVE-2014-8110 Public exploit

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    org.apache.activemq:activemq-client Maven
  • Unscored —
    CVE-2014-9512

    rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization p…

    rsync rsync Debian Ubuntu
  • Unscored —
    CVE-2015-0608

    Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and…

  • Unscored —
    CVE-2015-0580

    Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System …

  • Unscored —
    CVE-2015-0592

    The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2015-0619

    Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software allo…

  • Unscored —
    CVE-2015-0606

    The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka…

  • Unscored —
    CVE-2015-0610

    Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass inte…

  • Unscored —
    CVE-2015-0611

    The administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence IX5000 devices does not…

  • Unscored —
    CVE-2014-3365

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow …

  • Unscored —
    CVE-2014-2153

    Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure allow remote attacker…

  • Unscored —
    CVE-2014-2147

    The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, whic…

  • Unscored —
    CVE-2014-2152

    Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote att…