Skip to content
OpenAdvisories

Archive

April 2015

Vulnerabilities first published in this month (UTC), newest first.

← March 2015 2015 / April May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

33 results · Clear filters · Feed

  • Unscored —
    CVE-2015-1397 Public exploit EPSS 56%

    SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Communi…

  • Unscored —
    CVE-2011-4403 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the auth…

  • Unscored —
    CVE-2012-5451 Public exploit

    Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a …

  • Unscored —
    CVE-2015-2825 Public exploit EPSS 14%

    Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPre…

  • Unscored —
    CVE-2014-5370 Public exploit

    Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDr…

  • High 7.8
    CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

    Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2015-3035 Exploited Public exploit Scanner template EPSS 84%

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2015-1318 Public exploit

    The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a cra…

    apport Ubuntu
  • Unscored —
    CVE-2015-0493 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8…

  • Unscored —
    CVE-2015-0474 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8…

  • Unscored —
    CVE-2015-2572 Public exploit

    Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ea…

  • Unscored —
    CVE-2015-0345 Public exploit

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote a…

  • Unscored —
    CVE-2015-0359 Public exploit EPSS 92%

    Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows an…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3042 Public exploit EPSS 37%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2015-1635 Exploited Public exploit Scanner template EPSS 100%

    HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold a…

    KEV Feb 10, 2022
  • High 7.8
    CVE-2015-1641 Exploited Public exploit EPSS 97%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Com…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2015-2223 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks…

  • Unscored —
    CVE-2014-9311 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows rem…

  • Unscored —
    CVE-2014-9146 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2014-9145 Public exploit

    Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2015-1140 Public exploit

    Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vecto…

  • High 7.8
    CVE-2015-1130 Exploited Public exploit

    The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

    KEV Feb 10, 2022
  • Unscored —
    CVE-2015-1126 Public exploit

    WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2015-1100 Public exploit

    The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a deni…

  • Unscored —
    CVE-2015-2295 Public exploit EPSS 66%

    Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense befor…

  • Unscored —
    CVE-2015-2824 Public exploit

    Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attack…

  • Unscored —
    CVE-2015-2166 Public exploit Scanner template EPSS 27%

    Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, …

  • Unscored —
    CVE-2015-0179 Public exploit

    Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users …

  • Unscored —
    CVE-2015-2841 Public exploit

    Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictio…

  • Unscored —
    CVE-2015-2838 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote…

  • Unscored —
    CVE-2015-0816 Public exploit EPSS 66%

    Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resourc…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-0802 Public exploit EPSS 66%

    Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl…

    firefox Ubuntu