Skip to content
OpenAdvisories

Archive

18 May 2015

Vulnerabilities first published on this day (UTC), newest first.

← April 2015 2015 / May /18 June 2015 →
  1. 118
  2. 21
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 76
  8. 813
  9. 9 
  10. 10 
  11. 11 
  12. 1228
  13. 1395
  14. 1429
  15. 159
  16. 167
  17. 173
  18. 1813
  19. 199
  20. 2035
  21. 219
  22. 223
  23. 231
  24. 24 
  25. 2543
  26. 2616
  27. 2715
  28. 2813
  29. 2924
  30. 3015
  31. 315
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2015-0278

    libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileg…

  • Unscored —
    CVE-2015-1868 EPSS 79%

    The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Author…

    pdns-recursor pdns-recursor pdns pdns Debian Ubuntu
  • Medium 5.1
    CVE-2015-3631

    Arbitrary File Override in Docker Engine

    Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • High 8.4
    CVE-2015-3630

    Information Exposure in Docker Engine

    Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a cr…

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • High 8.4
    CVE-2015-3629

    Arbitrary File Write in Libcontainer

    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • Critical 10.0
    CVE-2015-3306 Exploited Public exploit Scanner template EPSS 99%

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

    proftpd-dfsg proftpd-dfsg Debian Ubuntu
    KEV Oct 8, 2026
  • Medium —
    CVE-2015-3627

    Symlink Attack in Libcontainer and Docker Engine

    Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local users to gain privileges via a symlink attack in an image.

    docker.io docker.io github.com/docker/docker Debian Ubuntu Go
  • Unscored —
    CVE-2015-3455 EPSS 11%

    Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with clien…

    squid squid3 Debian Ubuntu
  • Unscored —
    CVE-2015-2346

    XML external entity (XXE) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticate…

  • Unscored —
    CVE-2015-2667

    Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in …

  • Unscored —
    CVE-2015-2704

    realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character …

    realmd realmd realmd Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2014-8383

    The InFocus IN3128HD projector with firmware 0.26 allows remote attackers to bypass authentication via a direct request…

  • Unscored —
    CVE-2014-8384

    The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows rem…