Skip to content
OpenAdvisories

Archive

March 2015

Vulnerabilities first published in this month (UTC), newest first.

← February 2015 2015 / March April 2015 →
  1. 1 
  2. 25
  3. 310
  4. 45
  5. 59
  6. 611
  7. 710
  8. 87
  9. 952
  10. 108
  11. 1148
  12. 1220
  13. 1325
  14. 1412
  15. 151
  16. 1610
  17. 177
  18. 1837
  19. 1918
  20. 208
  21. 213
  22. 221
  23. 238
  24. 2422
  25. 2512
  26. 2624
  27. 2722
  28. 283
  29. 2912
  30. 3023
  31. 3120
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High —
    CVE-2015-2171

    Slim vulnerable to PHP object injection

    Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.

    slim/slim Packagist
  • High 7.5
    CVE-2015-2316

    Django Denial-of-service possibility with strip_tags

    The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input str…

    python-django django python-django Debian Ubuntu PyPI
  • High —
    CVE-2015-0254 EPSS 12%

    XXE in Apache Standard Taglibs

    Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.

    org.apache.taglibs:taglibs-standard org.apache.taglibs:taglibs-standard-impl jakarta-taglibs-standard Ubuntu Maven
  • High 7.5
    CVE-2015-2177 Public exploit EPSS 34%

    Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via cra…