Skip to content
OpenAdvisories

Archive

May 2015

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.4

    Information Exposure in Docker Engine

    Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound, (2) /proc/timer_stats, (3) /proc/latency_stats, and (4) /proc/fs, which allows local users to modify the host, obtain sensitive information, and perform protocol downgrade attacks via a cr…

  • High 8.4

    Arbitrary File Write in Libcontainer

    Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.

  • High 7.8
    CVE-2015-1671 Exploited EPSS 49%

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Off…

    KEV May 25, 2022
  • High 7.5

    Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

    The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.