Skip to content
OpenAdvisories

Archive

8 July 2015

Vulnerabilities first published on this day (UTC), newest first.

← June 2015 2015 / July /8 August 2015 →
  1. 117
  2. 29
  3. 375
  4. 47
  5. 55
  6. 639
  7. 73
  8. 822
  9. 936
  10. 1018
  11. 11 
  12. 12 
  13. 131
  14. 1488
  15. 1548
  16. 16172
  17. 17 
  18. 185
  19. 192
  20. 2022
  21. 218
  22. 226
  23. 2323
  24. 244
  25. 251
  26. 2610
  27. 271
  28. 28 
  29. 2910
  30. 303
  31. 31 
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2015-4614 Public exploit

    Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow…

  • Unscored —
    CVE-2015-4616 Public exploit EPSS 10%

    Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress all…

  • Unscored —
    CVE-2015-5461

    Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for…

  • Unscored —
    CVE-2015-5460

    Cross-site scripting (XSS) vulnerability in app/views/events/_menu.html.erb in Snorby 2.6.2 allows remote attackers to …

  • Medium —
    CVE-2015-1796

    Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML

    The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via …

    org.opensaml:opensaml edu.internet2.middleware:shibboleth-identityprovider Maven
  • Unscored —
    CVE-2015-5459

    SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro (P…

  • Unscored —
    CVE-2015-5458

    Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions…

  • Unscored —
    CVE-2015-5455

    Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2015-5453 Public exploit EPSS 58%

    Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shel…

  • Unscored —
    CVE-2015-5452 Public exploit

    SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2015-5456

    Cross-site scripting (XSS) vulnerability in the form method in modules/formclass.php in PivotX before 2.3.11 allows rem…

  • Unscored —
    CVE-2015-5454

    Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2015-5457

    PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions, which allo…

  • Unscored —
    CVE-2014-8175

    Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO…

  • Unscored —
    CVE-2014-9741

    Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Desktop, ArcGIS for Engine, and ArcGIS for Serve…

  • Unscored —
    CVE-2015-4620 EPSS 39%

    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recur…

    bind9 bind9 Debian Ubuntu
  • Unscored —
    CVE-2015-4240

    Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified U…

  • Unscored —
    CVE-2015-4241

    Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system re…

  • Unscored —
    CVE-2015-4243

    The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a de…

  • Unscored —
    CVE-2015-4242

    Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Manag…

  • Unscored —
    CVE-2015-2866 Public exploit

    SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attack…

  • High 7.8
    CVE-2015-5119 Exploited Public exploit EPSS 99%

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022