Skip to content
OpenAdvisories

Archive

April 2015

Vulnerabilities first published in this month (UTC), newest first.

← March 2015 2015 / April May 2015 →
  1. 140
  2. 2 
  3. 330
  4. 42
  5. 56
  6. 615
  7. 72
  8. 822
  9. 9 
  10. 1079
  11. 113
  12. 12 
  13. 1319
  14. 1464
  15. 1510
  16. 1692
  17. 1711
  18. 184
  19. 1917
  20. 20 
  21. 2164
  22. 225
  23. 232
  24. 2420
  25. 25 
  26. 266
  27. 275
  28. 285
  29. 2915
  30. 30 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2015-1856

    OpenStack Swift Unauthorized delete of versioned Swift object

    OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

    swift swift swift Debian Ubuntu PyPI
  • Medium —
    CVE-2015-2575

    Improper Access Control in MySQL Connectors Java

    Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

    mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • Medium 6.8
    CVE-2014-5400

    Hospira MedNet Password in Configuration File

    The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

    Hospira MedNet
  • Medium 6.8
    CVE-2014-5403

    Hospira MedNet Use of Hard-coded Cryptographic Key

    Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

    Hospira MedNet
  • Medium —
    CVE-2015-0259

    OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity

    OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.

    nova nova Debian PyPI