Skip to content
OpenAdvisories

Archive

20 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /20 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2015-0167

    Cross-site scripting (XSS) vulnerability in textAngular-sanitize.js in textAngular before 1.3.7 allows remote attackers…

  • Unscored —
    CVE-2015-1517 Public exploit

    SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users t…

  • Unscored —
    CVE-2015-2034

    Cross-site scripting (XSS) vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers t…

  • Unscored —
    CVE-2015-2040

    Cross-site scripting (XSS) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plu…

  • Unscored —
    CVE-2015-2039

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live Chat & Contact Form plugin 2.0 for WordPr…

  • Unscored —
    CVE-2015-2035

    SQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote administrators to execut…

  • Unscored —
    CVE-2014-0005

    PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0…

  • Unscored —
    CVE-2014-3682

    XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2Resou…

  • Medium —
    CVE-2014-8114

    UberFire Framework Improperly Restricts Paths

    The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or (2) read arbitrary files via vectors involving FileDownloadServlet.

    org.uberfire:uberfire-parent Maven
  • Unscored —
    CVE-2014-8115

    The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbit…

  • Unscored —
    CVE-2015-0879

    CREAR AL-Mail32 before 1.13d allows remote attackers to cause a denial of service (application crash) via a (1) CON, (2…

  • Unscored —
    CVE-2015-0878

    Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files v…

  • Unscored —
    CVE-2015-0881

    CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct…

    squid Debian
  • Unscored —
    CVE-2015-0880

    Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename o…

  • Unscored —
    CVE-2015-2033

    Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2014-5355

    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a st…

    krb5 krb5 Debian Ubuntu
  • Unscored —
    CVE-2015-0584

    The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX…

  • Unscored —
    CVE-2015-0628

    The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying rest…