Skip to content
OpenAdvisories

Archive

7 June 2015

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —
    CVE-2015-0779 Public exploit EPSS 74%

    Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 1…

  • Unscored —

    The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel throu…

  • Unscored —

    The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which al…

  • Unscored —

    Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in …

  • Unscored —

    drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain …

  • High —
    CVE-2014-0230 EPSS 20%

    Uncontrolled Resource Consumption in Apache Tomcat

    Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread co…

  • Medium —
    CVE-2014-7810 EPSS 13%

    Improper Access Control in Apache Tomcat

    The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypa…

  • Unscored —
    CVE-2010-5323 Public exploit EPSS 14%

    Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration …

  • Unscored —
    CVE-2010-5324 Public exploit EPSS 72%

    Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration …

  • Unscored —

    CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 device…

  • Unscored —

    Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified co…

  • Unscored —

    Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF…

  • Unscored —
    CVE-2015-2125 Public exploit

    Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to b…

  • Unscored —

    Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8…

  • Unscored —

    IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1…