Skip to content
OpenAdvisories

Archive

May 2015

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2015-4000 Public exploit EPSS 100%

    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…

  • Low —

    concrete5 vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.