Skip to content
OpenAdvisories

Archive

3 June 2015

Vulnerabilities first published on this day (UTC), newest first.

← May 2015 2015 / June /3 July 2015 →
  1. 125
  2. 219
  3. 38
  4. 47
  5. 57
  6. 6 
  7. 716
  8. 814
  9. 926
  10. 1070
  11. 117
  12. 1216
  13. 1322
  14. 14 
  15. 1567
  16. 1615
  17. 1719
  18. 1816
  19. 1911
  20. 204
  21. 21 
  22. 2210
  23. 2316
  24. 2427
  25. 253
  26. 2611
  27. 272
  28. 2825
  29. 293
  30. 3029
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium —
    CVE-2015-0263

    Apache Camel XML External Entity vulnerability

    XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.

    org.apache.camel:camel-core Maven
  • Medium —
    CVE-2015-0264

    Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object

    Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile ob…

    org.apache.camel:camel-core Maven
  • Unscored —
    CVE-2015-4105

    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to…

    xen qemu xen qemu Debian Ubuntu
  • Unscored —
    CVE-2015-4104

    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users …

    xen qemu xen qemu Debian Ubuntu
  • Unscored —
    CVE-2015-4103

    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local …

    xen qemu xen qemu Debian Ubuntu
  • Unscored —
    CVE-2015-4106

    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might …

    xen qemu xen qemu Debian Ubuntu
  • Unscored —
    CVE-2015-4038 Public exploit

    The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an …

  • Unscored —
    CVE-2014-9721

    libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 prot…

    zeromq3 zeromq3 Debian Ubuntu