Skip to content
OpenAdvisories

Archive

29 May 2015

Vulnerabilities first published on this day (UTC), newest first.

← April 2015 2015 / May /29 June 2015 →
  1. 118
  2. 21
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 76
  8. 813
  9. 9 
  10. 10 
  11. 11 
  12. 1228
  13. 1395
  14. 1429
  15. 159
  16. 167
  17. 173
  18. 1813
  19. 199
  20. 2035
  21. 219
  22. 223
  23. 231
  24. 24 
  25. 2543
  26. 2616
  27. 2715
  28. 2813
  29. 2924
  30. 3015
  31. 315
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2015-0751

    Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers t…

  • Unscored —
    CVE-2015-0752

    Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote at…

  • Unscored —
    CVE-2015-0200

    IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database …

  • Unscored —
    CVE-2015-0757

    The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session…

  • Unscored —
    CVE-2015-0847

    nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote att…

    nbd nbd Debian Ubuntu
  • Unscored —
    CVE-2015-0753

    SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) …

  • Unscored —
    CVE-2015-0755

    The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client …

  • Unscored —
    CVE-2015-0756

    Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service …

  • Unscored —
    CVE-2015-0754

    Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (C…

  • Medium —
    CVE-2015-1833 Public exploit EPSS 56%

    Improper Input Validation in Apache Jackrabbit

    XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet …

    jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-core Debian Ubuntu Maven
  • Unscored —
    CVE-2015-4067

    Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2015-4069

    The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credent…

  • Unscored —
    CVE-2015-4060

    Heap-based buffer overflow in the TermProxy (WLTermProxyService.exe) service in Wavelink ConnectPro allows remote attac…

  • Unscored —
    CVE-2015-4059

    Heap-based buffer overflow in the License Server (LicenseServer.exe) in Wavelink Terminal Emulation (TE) allows remote …

  • Unscored —
    CVE-2015-4032

    projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote attackers to rename arbitrar…

  • Critical 9.1
    CVE-2015-4068 Exploited EPSS 64%

    Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive infor…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2015-4047

    racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and…

    ipsec-tools Ubuntu
  • Unscored —
    CVE-2015-4031

    Directory traversal vulnerability in saveFile.jsp in the development installation in Visual Mining NetChart allows remo…

  • Unscored —
    CVE-2015-3995

    SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary files via an IMPORT FR…

  • Unscored —
    CVE-2015-3994

    The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) …

  • Unscored —
    CVE-2013-7441

    The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a…

    nbd Debian
  • Unscored —
    CVE-2014-9727 Public exploit EPSS 72%

    AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter …

  • Unscored —
    CVE-2015-4137 Public exploit

    SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2015-3904

    Multiple cross-site scripting (XSS) vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress a…