Skip to content
OpenAdvisories

Archive

April 2015

Vulnerabilities first published in this month (UTC), newest first.

← March 2015 2015 / April May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2015-0846

    django-markupfield Arbitrary File Read

    django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.

    django-markupfield django-markupfield Debian PyPI
  • High —
    CVE-2014-8125

    Improper Input Validation in Drools and jBPM

    XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.

    org.drools:drools-core org.jbpm:jbpm-bpmn2 Maven
  • High 7.8
    CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

    Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2015-3035 Exploited Public exploit Scanner template EPSS 84%

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before…

    KEV Mar 25, 2022
  • High 7.5
    CVE-2015-1852

    OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks

    The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows r…

    python-keystoneclient python-keystoneclient python-keystonemiddleware keystonemiddleware Debian Ubuntu PyPI
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-1641 Exploited Public exploit EPSS 97%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Com…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2015-1130 Exploited Public exploit

    The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

    KEV Feb 10, 2022
  • High —
    CVE-2015-0225

    Improper Neutralization of Special Elements used in a Command in Apache Cassandra

    The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI req…

    org.apache.cassandra:apache-cassandra Maven
  • High 7.5
    CVE-2015-0666 Exploited EPSS 40%

    Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(…

    KEV Mar 25, 2022