Skip to content
OpenAdvisories

Archive

8 June 2015

Vulnerabilities first published on this day (UTC), newest first.

← May 2015 2015 / June /8 July 2015 →
  1. 125
  2. 219
  3. 38
  4. 47
  5. 57
  6. 6 
  7. 716
  8. 814
  9. 926
  10. 1070
  11. 117
  12. 1216
  13. 1322
  14. 14 
  15. 1567
  16. 1615
  17. 1719
  18. 1816
  19. 1911
  20. 204
  21. 21 
  22. 2210
  23. 2316
  24. 2427
  25. 253
  26. 2611
  27. 272
  28. 2825
  29. 293
  30. 3029
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Low —
    CVE-2015-4053

    ceph-deploy uses world-readable permissions on client.admin key

    The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

    ceph-deploy PyPI
  • Unscored —
    CVE-2015-4051

    Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote atta…

  • Unscored —
    CVE-2015-3905

    Buffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a de…

    t1utils t1utils Debian Ubuntu
  • Unscored —
    CVE-2015-3001 Public exploit

    SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which a…

  • Unscored —
    CVE-2015-3201

    Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to…

  • Unscored —
    CVE-2015-3000 Public exploit

    SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a la…

  • Unscored —
    CVE-2015-2999 Public exploit

    Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary…

  • Unscored —
    CVE-2015-2997 Public exploit EPSS 57%

    SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accoun…

  • Unscored —
    CVE-2015-2995 Public exploit EPSS 34%

    The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote a…

  • Unscored —
    CVE-2015-2996 Public exploit EPSS 87%

    Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitra…

  • Unscored —
    CVE-2015-2994 Public exploit EPSS 50%

    Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators …

  • Unscored —
    CVE-2015-2993 Public exploit EPSS 55%

    SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers …

  • Unscored —
    CVE-2015-2998 Public exploit EPSS 26%

    SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sens…

  • Unscored —
    CVE-2014-6284

    SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the …