Skip to content
OpenAdvisories

Archive

23 February 2015

Vulnerabilities first published on this day (UTC), newest first.

← January 2015 2015 / February /23 March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2015-1589

    Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot d…

    archmage archmage Debian Ubuntu
  • Unscored —
    CVE-2015-1315

    Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to exe…

    unzip Ubuntu
  • Low —
    CVE-2015-1426

    Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata

    Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.

    facter facter facter Debian Ubuntu RubyGems
  • High 8.8
    CVE-2015-2051 Exploited Public exploit EPSS 97%

    The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute a…

    KEV Feb 10, 2022
  • Unscored —
    CVE-2015-2048

    Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attacke…

  • Unscored —
    CVE-2015-2053

    The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO serv…

  • Unscored —
    CVE-2015-2055 Public exploit

    Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the…

  • Unscored —
    CVE-2015-2054

    CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 76…

  • Unscored —
    CVE-2015-2050

    D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vect…

  • Unscored —
    CVE-2015-2047

    The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.…

  • Unscored —
    CVE-2015-2049 Public exploit EPSS 67%

    Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated us…

  • Unscored —
    CVE-2015-2052

    Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remot…

  • Unscored —
    CVE-2014-7922

    The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests …