Skip to content
OpenAdvisories

Archive

25 March 2015

Vulnerabilities first published on this day (UTC), newest first.

← February 2015 2015 / March /25 April 2015 →
  1. 1 
  2. 25
  3. 310
  4. 45
  5. 59
  6. 611
  7. 710
  8. 87
  9. 952
  10. 108
  11. 1148
  12. 1220
  13. 1325
  14. 1412
  15. 151
  16. 1610
  17. 177
  18. 1837
  19. 1918
  20. 208
  21. 213
  22. 221
  23. 238
  24. 2422
  25. 2512
  26. 2624
  27. 2722
  28. 283
  29. 2912
  30. 3023
  31. 3120
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2015-0295

    The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, w…

    qtbase-opensource-src qtbase-opensource-src qt4-x11 Debian Ubuntu
  • Unscored —
    CVE-2015-2559

    Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by…

    drupal7 Ubuntu
  • Medium 6.1
    CVE-2015-2317

    Django cross-site scripting (XSS) attack via user-supplied redirect URLs

    The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control char…

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2015-2316

    Django Denial-of-service possibility with strip_tags

    The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input str…

    python-django django python-django Debian Ubuntu PyPI
  • Unscored —
    CVE-2015-2701 Public exploit

    Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication o…

  • Unscored —
    CVE-2015-2703

    Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances …

  • Unscored —
    CVE-2015-2702

    Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL b…

  • Unscored —
    CVE-2014-9711

    Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0…

  • Unscored —
    CVE-2015-0138

    GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6…

  • Unscored —
    CVE-2014-6134

    IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, …

  • Unscored —
    CVE-2014-8923

    The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active…

  • Unscored —
    CVE-2014-8925

    Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0…