Skip to content
OpenAdvisories

Archive

17 April 2015

Vulnerabilities first published on this day (UTC), newest first.

← March 2015 2015 / April /17 May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • High 7.5
    CVE-2015-3035 Exploited Public exploit Scanner template EPSS 84%

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2015-0845

    Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x bef…

  • Medium —
    CVE-2015-1856

    OpenStack Swift Unauthorized delete of versioned Swift object

    OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

    swift swift swift Debian Ubuntu PyPI
  • Unscored —
    CVE-2015-1318 Public exploit

    The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a cra…

    apport Ubuntu
  • High 7.5
    CVE-2015-1852

    OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks

    The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows r…

    python-keystoneclient python-keystoneclient python-keystonemiddleware keystonemiddleware Debian Ubuntu PyPI
  • Unscored —
    CVE-2015-0530

    Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and…

  • Unscored —
    CVE-2015-0691

    A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to exe…

  • Unscored —
    CVE-2015-0700

    Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Sec…

  • Unscored —
    CVE-2015-0938

    search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attack…

  • Unscored —
    CVE-2015-0937

    Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before…

  • Unscored —
    CVE-2015-0695

    Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly h…