Skip to content
OpenAdvisories

Archive

February 2015

Vulnerabilities first published in this month (UTC), newest first.

← January 2015 2015 / February March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low —
    CVE-2015-1426

    Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata

    Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.

    facter facter facter Debian Ubuntu RubyGems
  • Low —
    CVE-2014-1832

    Insecure use of temporary files in Phusion passenger

    Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

    passenger RubyGems
  • Low —
    CVE-2014-1831

    Insecure use of temporary files in passenger

    Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

    passenger passenger Debian RubyGems
  • Low —
    CVE-2014-9568

    puppetlabs-rabbitmq allows local users to obtain sensitive information

    puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as demonstrated by using Facter.

    puppetlabs-rabbitmq Hex