Skip to content
OpenAdvisories

Archive

February 2015

Vulnerabilities first published in this month (UTC), newest first.

← January 2015 2015 / February March 2015 →
  1. 115
  2. 227
  3. 336
  4. 422
  5. 5 
  6. 639
  7. 711
  8. 820
  9. 98
  10. 1012
  11. 1165
  12. 1218
  13. 1320
  14. 148
  15. 153
  16. 1620
  17. 1713
  18. 188
  19. 1932
  20. 2018
  21. 214
  22. 221
  23. 2313
  24. 2422
  25. 2523
  26. 266
  27. 2713
  28. 289
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2015-2067 Public exploit EPSS 38%

    MAGMI plugin for Magento Server Directory Traversal

    Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

    dweeves/magmi Packagist
  • Medium —
    CVE-2015-2068 Public exploit EPSS 14%

    MAGMI cross-site scripting (XSS)

    Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magm…

    dweeves/magmi Packagist
  • Medium —
    CVE-2014-8110 Public exploit

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    org.apache.activemq:activemq-client Maven