Skip to content
OpenAdvisories

Archive

1 May 2015

Vulnerabilities first published on this day (UTC), newest first.

← April 2015 2015 / May /1 June 2015 →
  1. 118
  2. 21
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 76
  8. 813
  9. 9 
  10. 10 
  11. 11 
  12. 1228
  13. 1395
  14. 1429
  15. 159
  16. 167
  17. 173
  18. 1813
  19. 199
  20. 2035
  21. 219
  22. 223
  23. 231
  24. 24 
  25. 2543
  26. 2616
  27. 2715
  28. 2813
  29. 2924
  30. 3015
  31. 315
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2015-0257

    Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ov…

  • Unscored —
    CVE-2015-0237

    Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during l…

  • Unscored —
    CVE-2015-3153

    The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destinatio…

    curl curl Debian Ubuntu
  • Unscored —
    CVE-2015-3633

    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2015-3446

    The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary…

  • Medium —
    CVE-2015-3337 Public exploit Scanner template EPSS 33%

    Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

    Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

    org.elasticsearch:elasticsearch Maven
  • Unscored —
    CVE-2015-3435 EPSS 10%

    Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with a…

  • Unscored —
    CVE-2015-3632 Public exploit

    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2015-2248 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) product…

  • High 7.5
    CVE-2014-3598

    Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

    The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.

    pillow pillow Debian PyPI
  • Unscored —
    CVE-2015-0912

    EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.

  • Unscored —
    CVE-2015-0712

    The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote atta…

  • Unscored —
    CVE-2015-0532

    EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict passwor…

  • Unscored —
    CVE-2015-0913

    Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary we…

  • Unscored —
    CVE-2015-0914

    EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP …

  • Unscored —
    CVE-2015-1243

    Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM i…

    chromium-browser oxide-qt Ubuntu
  • Unscored —
    CVE-2015-1250

    Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service…

    chromium-browser oxide-qt Ubuntu
  • Critical 9.8
    CVE-2014-8361 Exploited Public exploit EPSS 100%

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClie…

    KEV Sep 18, 2023