Skip to content
OpenAdvisories

Archive

29 April 2015

Vulnerabilities first published on this day (UTC), newest first.

← March 2015 2015 / April /29 May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2015-3459

    The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for roo…

  • Unscored —
    CVE-2015-1397 Public exploit EPSS 56%

    SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Communi…

  • Unscored —
    CVE-2015-1399

    PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento…

  • Unscored —
    CVE-2015-1398 EPSS 14%

    Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14…

  • Unscored —
    CVE-2015-3458

    The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterpr…

  • Unscored —
    CVE-2015-3457 EPSS 25%

    Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentica…

  • Unscored —
    CVE-2015-1322

    Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1,…

    network-manager Ubuntu
  • Unscored —
    CVE-2015-1321

    Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a…

    oxide-qt Ubuntu
  • Unscored —
    CVE-2015-3447

    Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x a…

  • Unscored —
    CVE-2015-3026

    Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a …

    icecast2 icecast2 Debian Ubuntu
  • Low —
    CVE-2015-3448

    rest-client allows local users to obtain sensitive information by reading the log

    REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

    rest-client ruby-rest-client Debian RubyGems
  • Unscored —
    CVE-2015-0711

    The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows …

  • Unscored —
    CVE-2015-0709

    Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging k…

  • Unscored —
    CVE-2015-0710

    The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a deni…

  • Unscored —
    CVE-2015-0708

    Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (devi…