Skip to content
OpenAdvisories

Archive

24 April 2015

Vulnerabilities first published on this day (UTC), newest first.

← March 2015 2015 / April /24 May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2015-1886

    The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 …

  • Unscored —
    CVE-2015-1908

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27…

  • Unscored —
    CVE-2015-2706

    Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote …

    firefox Ubuntu
  • Unscored —
    CVE-2015-3416

    The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values dur…

    sqlite3 sqlite3 sqlite Debian Ubuntu
  • Unscored —
    CVE-2015-3414

    SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-depende…

    sqlite3 sqlite3 Debian Ubuntu
  • Unscored —
    CVE-2015-3417

    Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows rem…

    ffmpeg libav Debian Ubuntu
  • Unscored —
    CVE-2015-3415

    The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which a…

    sqlite3 Debian
  • Unscored —
    CVE-2015-0297

    Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers…

  • High 7.5
    CVE-2015-0846

    django-markupfield Arbitrary File Read

    django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.

    django-markupfield django-markupfield Debian PyPI
  • Unscored —
    CVE-2015-3310

    Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when t…

    ppp ppp ppp Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2015-3145 EPSS 30%

    The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which…

    curl curl Debian Ubuntu
  • Unscored —
    CVE-2015-3144 EPSS 11%

    The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows …

    curl Debian
  • Unscored —
    CVE-2015-3143 EPSS 11%

    cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to conn…

    curl curl Debian Ubuntu
  • Unscored —
    CVE-2015-3148 EPSS 14%

    cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote …

    curl curl Debian Ubuntu
  • Unscored —
    CVE-2011-4403 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the auth…

  • Unscored —
    CVE-2012-2930

    Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers …

  • Unscored —
    CVE-2012-2932

    Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inje…

  • Unscored —
    CVE-2012-5451 Public exploit

    Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a …

  • Unscored —
    CVE-2015-0910

    Cross-site scripting (XSS) vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to i…

  • Unscored —
    CVE-2015-0911

    Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arb…