Skip to content
OpenAdvisories

Archive

14 May 2015

Vulnerabilities first published on this day (UTC), newest first.

← April 2015 2015 / May /14 June 2015 →
  1. 118
  2. 21
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 76
  8. 813
  9. 9 
  10. 10 
  11. 11 
  12. 1228
  13. 1395
  14. 1429
  15. 159
  16. 167
  17. 173
  18. 1813
  19. 199
  20. 2035
  21. 219
  22. 223
  23. 231
  24. 24 
  25. 2543
  26. 2616
  27. 2715
  28. 2813
  29. 2924
  30. 3015
  31. 315
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2015-0971

    The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors relate…

    suricata suricata Debian Ubuntu
  • Unscored —
    CVE-2015-1848

    The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which m…

  • Unscored —
    CVE-2015-3427

    Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, w…

    quassel quassel Debian Ubuntu
  • Unscored —
    CVE-2015-3300 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional W…

    Web / CMS
  • Unscored —
    CVE-2015-3986 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordP…

    Web / CMS
  • Unscored —
    CVE-2015-3983

    The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes…

  • Unscored —
    CVE-2015-3987

    Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep C…

  • Unscored —
    CVE-2015-3301 Public exploit

    Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce…

    Web / CMS
  • Unscored —
    CVE-2012-5849 Public exploit

    Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arb…

  • Unscored —
    CVE-2014-8162

    XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows …

  • Unscored —
    CVE-2015-0797

    GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31…

    gst-plugins-bad0.10 Ubuntu
  • Unscored —
    CVE-2015-2718

    The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and o…

    firefox Ubuntu
  • Unscored —
    CVE-2015-2714

    Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which…

  • Unscored —
    CVE-2015-2709

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cau…

    firefox Ubuntu
  • Unscored —
    CVE-2015-2712

    The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification…

    firefox Ubuntu
  • Unscored —
    CVE-2015-2716

    Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2715

    Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote atta…

    firefox Ubuntu
  • Unscored —
    CVE-2015-2708

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2710

    Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2713

    Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, an…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-2717

    Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or …

    firefox Ubuntu
  • Unscored —
    CVE-2015-2720

    The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe c…

  • Unscored —
    CVE-2015-2711

    Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of conte…

    firefox Ubuntu
  • Unscored —
    CVE-2015-3326

    Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 cr…

  • Unscored —
    CVE-2015-3644

    Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server …

    stunnel4 Debian
  • Medium —
    CVE-2015-3397

    Yii Framework Cross-site Scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6 or 7.

    yiisoft/yii2 Packagist
  • Unscored —
    CVE-2014-1902

    Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range…

  • Unscored —
    CVE-2014-1900

    Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCB…

  • Unscored —
    CVE-2014-1901

    Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCB…