Skip to content
OpenAdvisories

Archive

2 June 2015

Vulnerabilities first published on this day (UTC), newest first.

← May 2015 2015 / June /2 July 2015 →
  1. 125
  2. 219
  3. 38
  4. 47
  5. 57
  6. 6 
  7. 716
  8. 814
  9. 926
  10. 1070
  11. 117
  12. 1216
  13. 1322
  14. 14 
  15. 1567
  16. 1615
  17. 1719
  18. 1816
  19. 1911
  20. 204
  21. 21 
  22. 2210
  23. 2316
  24. 2427
  25. 253
  26. 2611
  27. 272
  28. 2825
  29. 293
  30. 3029
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    CVE-2015-4050 Scanner template

    Symfony Incorrect Access Control

    FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the _controller attribute is set, which allows remote attack…

    symfony/symfony symfony symfony/http-kernel Debian Packagist
  • Medium —
    CVE-2015-2944

    Improper Neutralization of Input During Web Page Generation in Apache Sling

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlRespon…

    org.apache.sling:org.apache.sling.servlets.post org.apache.sling:org.apache.sling.api Maven