Skip to content
OpenAdvisories

Archive

24 June 2015

Vulnerabilities first published on this day (UTC), newest first.

← May 2015 2015 / June /24 July 2015 →
  1. 125
  2. 219
  3. 38
  4. 47
  5. 57
  6. 6 
  7. 716
  8. 814
  9. 926
  10. 1070
  11. 117
  12. 1216
  13. 1322
  14. 14 
  15. 1567
  16. 1615
  17. 1719
  18. 1816
  19. 1911
  20. 204
  21. 21 
  22. 2210
  23. 2316
  24. 2427
  25. 253
  26. 2611
  27. 272
  28. 2825
  29. 293
  30. 3029
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2013-7397

    Insufficient Verification of Data Authenticity in Async Http Client

    Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an a…

    async-http-client async-http-client com.ning:async-http-client Debian Ubuntu Maven
  • Medium —
    CVE-2013-7398

    Insufficient Verification of Data Authenticity in Async Http Client

    main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match during verification of X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS ser…

    com.ning:async-http-client Maven
  • Medium —
    CVE-2015-5062

    Silverstripe CMS Open Redirect

    Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.

    silverstripe/framework silverstripe/cms Packagist
  • Medium —
    CVE-2015-2308

    Symfony Vulnerable to PHP Eval Injection

    Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element.

    symfony/symfony symfony symfony/http-kernel Debian Packagist