Archive
May 2015
Vulnerabilities first published in this month (UTC), newest first.
410 results · Feed
-
Unscored —CVE-2015-2248 Public exploit
Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) product…
-
High 7.5
Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
-
Unscored —
EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.
-
Unscored —
The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote atta…
-
Unscored —
EMC RSA Identity Management and Governance (IMG) 6.9 before P04 and 6.9.1 before P01 does not properly restrict passwor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary we…
-
Unscored —
EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP …
-
Unscored —
Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM i…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service…
-
Critical 9.8
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClie…
KEV Sep 18, 2023