Skip to content
OpenAdvisories

Archive

12 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /12 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2015-0227

    Improper Access Control in Apache WSS4J

    Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."

    wss4j org.apache.ws.security:wss4j wss4j:wss4j Debian Maven
  • Medium —
    CVE-2014-8110 Public exploit

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    org.apache.activemq:activemq-client Maven